PT-2023-7571 · Rockwell Automation · Factorytalk Services Platform

Published 2023-10-27 · Updated 2024-05-22 · CVE-2023-46290

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk Services Platform (affected versions not specified)

Description The issue is related to inadequate code logic in the FactoryTalk Services Platform, which could allow a previously unauthenticated threat actor to obtain a local Windows OS user token through the web service. This token could then be used to log in to the FactoryTalk Services Platform. The vulnerability can only be exploited if an authorized user did not previously log in to the web service. It is associated with weaknesses in the authentication procedure, potentially allowing a remote attacker to bypass authentication and gain full access to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-08627

CVE-2023-46290

Affected Products

Factorytalk Services Platform

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-46290 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46290 · Vendor Advisory
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141165 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08627 · Security Note
• https://t.me/cibsecurity/73078 · Telegram Post
• https://twitter.com/CVEnew/status/1717973985005048239 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1718002926151496020 · Twitter Post
• https://t.me/cvenotify/60106 · Telegram Post
• https://t.me/true_secator/5765 · Telegram Post