Rockwell Automation FactoryTalk Services Platform
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, load malicious configuration files, or elevate privileges from a user to an administrator.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-2639US | medium4.7 | — | ||
The underlying feedback mechanism of
Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network does… | ||||
| CVE-2023-2638US | medium5.0 | — | ||
Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected.
Improper authorization in FTSSBackupRestore.exe ma… | ||||
| CVE-2023-2637US | high8.2OT erhöht | — | ||
Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies. Hard-coded cryptographic key may lead to privilege escala… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-164-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-164-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- BehobenFactoryTalk Policy Manager
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - BehobenFactoryTalk Policy Manager
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - BehobenFactoryTalk Policy Manager
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - BehobenFactoryTalk System Services
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - BehobenFactoryTalk System Services
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723 - BehobenFactoryTalk System Services
Rockwell Automation encourages users to upgrade to the latest version: Upgrade to v6.30.00 or later.
https://compatibility.rockwellautomation.com/Pages/MultiProductCompareSelections.aspx?crumb=113&versions=61050,59723
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan