CVE-2023-2444

A cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk Vantagepoint. This vulnerability can be exploited in two ways. If an attacker sends a malicious link to a computer that is on the same domain as the FactoryTalk Vantagepoint server and a user clicks the link, the attacker could impersonate the legitimate user and send requests to the affected product.  Additionally, if an attacker sends an untrusted link to a computer that is not on the same domain as the server and a user opens the FactoryTalk Vantagepoint website, enters credentials for the FactoryTalk Vantagepoint server, and clicks on the malicious link a cross site request forgery attack would be successful as well.

• CWE-352

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139443Permissions Required, Vendor Advisory
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139443Permissions Required, Vendor Advisory

Published

May 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24434A cross-site request forgery (CSRF) vulnerability in Jenkins…8.8
• CVE-2023-24435A missing permission check in Jenkins GitHub Pull Request Bu…6.5
• CVE-2023-24436A missing permission check in Jenkins GitHub Pull Request Bu…4.3
• CVE-2023-24437A cross-site request forgery (CSRF) vulnerability in Jenkins…8.8
• CVE-2023-24438A missing permission check in Jenkins JIRA Pipeline Steps Pl…6.5
• CVE-2023-24439Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and…5.5
• CVE-2023-24440Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and…5.5
• CVE-2023-24441Jenkins MSTest Plugin 1.0.0 and earlier does not configure i…9.8
• CVE-2023-24442Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and…5.5
• CVE-2023-24443Jenkins TestComplete support Plugin 2.8.1 and earlier does n…9.8
• CVE-2023-24444Jenkins OpenID Plugin 2.4 and earlier does not invalidate th…9.8
• CVE-2023-24445Jenkins OpenID Plugin 2.4 and earlier improperly determines …6.1