Rockwell Automation FactoryTalk View Site Edition
view advisory published 2023-10-26
Successful exploitation of this vulnerability could cause the product to become unavailable and require a restart to recover resulting in a denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-46289US | high7.5 | — | ||
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offl… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-299-05 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-299-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationFactoryTalk View Site Edition
For more information, see Rockwell Automation's security advisory.
- FixedFactoryTalk View Site Edition
Rockwell Automation has provided patches for these versions v11.0 & v12.0 & v13.0.
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140243/loc/en_US#__highlight
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan