Rockwell Automation FactoryTalk Services Platform
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, load malicious configuration files, or elevate privileges from a user to an administrator.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-2639US | medium4.7 | — | ||
The underlying feedback mechanism of
Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network does… | ||||
| CVE-2023-2638US | medium5.0 | — | ||
Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected.
Improper authorization in FTSSBackupRestore.exe ma… | ||||
| CVE-2023-2637US | high8.2OT elevated | — | ||
Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies. Hard-coded cryptographic key may lead to privilege escala… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-164-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-164-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- FixedFactoryTalk Policy Manager
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - FixedFactoryTalk Policy Manager
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - FixedFactoryTalk Policy Manager
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - FixedFactoryTalk System Services
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - FixedFactoryTalk System Services
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - FixedFactoryTalk System Services
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan