Rockwell Automation FactoryTalk View Machine Edition
Successful exploitation of this vulnerability could allow an attacker to execute code remotely with specially crafted malicious packets or by using a self-made library to bypass security checks.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-2071US | critical9.8 | — | ||
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-264-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-264-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationFactoryTalk View Machine Edition
Users of the affected versions are encouraged by Rockwell Automation to upgrade to corrected firmware revisions. Uers are also strongly encouraged to implement Rockwell Automation's suggested security best practices to minimize the risk of the vulnerability.
- BehobenFactoryTalk View Machine Edition
Rockwell recommends updating FactoryTalk View Machine Edition with v12.0 & v13.0 patch
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139946/loc/en_US
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan