PT-2023-6582 · Rockwell Automation · Factorytalk® View Site Edition

Published 2023-10-27 · Updated 2023-11-07 · CVE-2023-46289

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View Site Edition (affected versions not specified)

Description The issue is related to insufficient validation of user input, which could allow threat actors to send malicious data and bring the product offline. If exploited, the product would become unavailable and require a restart to recover, resulting in a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2023-07346

CVE-2023-46289

Affected Products

Factorytalk® View Site Edition

References · 10

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07346 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-46289 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46289 · Vendor Advisory
• https://vuldb.com/ru/?id.243659 · Note
• https://twitter.com/CVEnew/status/1717973983964827780 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1718003685513396368 · Twitter Post
• https://t.me/cvenotify/60107 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-299-05 · Note
• https://t.me/cibsecurity/73072 · Telegram Post