PT-2023-3726 · Rockwell Automation · Factorytalk Policy Manager+1

Sharon Brizinov · Published 2023-06-13 · Updated 2023-06-26 · CVE-2023-2637

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk System Services (affected versions not specified) FactoryTalk Policy Manager (affected versions not specified)

Description The issue is related to the use of a hard-coded cryptographic key in Rockwell Automation's FactoryTalk System Services to generate administrator cookies. This may lead to privilege escalation, allowing a local, authenticated non-admin user to generate an invalid administrator cookie and gain administrative privileges to the FactoryTalk Policy Manager database. The threat actor could make malicious changes to the database, which would be deployed when a legitimate user deploys a security policy model. User interaction is required for successful exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

BDU:2023-04014

CVE-2023-2637

Affected Products

Factorytalk Policy Manager

Factorytalk System Services

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-2637 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2637 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04014 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683 · Vendor Advisory
• https://t.me/cibsecurity/65176 · Telegram Post