Rockwell Automation FactoryTalk Services Platform
view advisory published 2023-10-26
Successful exploitation of this vulnerability could use a token to log into the system.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-46290US | high8.1 | — | ||
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web servi… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-299-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-299-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationFactoryTalk Services Platform
For more information see Rockwell Automation's security advisory.
- FixedFactoryTalk Services Platform
Rockwell Automation encourages users of the affected software to update to V2.80 or later, if possible. Additionally, they encourage customers to implement their suggested security best practices to minimize the risk of vulnerability.
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan