Rockwell Automation FactoryTalk View Machine Edition
Successful exploitation of this vulnerability could allow an attacker to execute code remotely with specially crafted malicious packets or by using a self-made library to bypass security checks.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-2071US | critical9.8 | — | ||
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-264-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-264-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationFactoryTalk View Machine Edition
Users of the affected versions are encouraged by Rockwell Automation to upgrade to corrected firmware revisions. Uers are also strongly encouraged to implement Rockwell Automation's suggested security best practices to minimize the risk of the vulnerability.
- FixedFactoryTalk View Machine Edition
Rockwell recommends updating FactoryTalk View Machine Edition with v12.0 & v13.0 patch
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139946/loc/en_US
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan