PT-2023-5215 · Rockwell Automation · Pavilion8

Published 2023-04-06 · Updated 2023-09-15 · CVE-2023-29463

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation Pavilion8 (affected versions not specified)

Description The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and log users out of their session. The vulnerability is related to insufficient authentication procedures, which could allow a remote attacker to gain unauthorized access to protected information or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the JMX Console to minimize the risk of exploitation. Avoid using the JMX Console until the issue is resolved.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-05823

CVE-2023-29463

Affected Products

Pavilion8

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-29463 · Security Note
• https://osv.dev/vulnerability/CVE-2023-29463 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05823 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140590 · Note
• https://vuldb.com/ru/?id.239618 · Note
• https://twitter.com/CVEnew/status/1701640137963114705 · Twitter Post