Rockwell Automation FactoryTalk Activation
view advisory published 2024-01-04
Successful exploitation of these vulnerabilities could result in a buffer overflow and allow the attacker to gain full access to the system.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-38545US | critical9.8 | Exploit | ||
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is asked to pass along the host name to the SOCKS5 proxy to allow
that to resolve the ad… | ||||
| CVE-2023-3935US | — | — | ||
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-004-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-004-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationFactory Talk Activation Manager
Rockwell Automation encourages users to implement their suggested security best practices to minimize risk of the vulnerability.
- MitigationFactory Talk Activation Manager
Rockwell Automation encourages users to implement their suggested security best practices to minimize risk of the vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan