CVE-2023-46289
Last modified
CVE-2023-46289 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition. . EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Factorytalk View | >= 11.0, <= 13.0 |
References
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167Permissions Required, Vendor Advisory
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167Permissions Required, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-46289?
How severe is CVE-2023-46289?
How do I fix CVE-2023-46289?
Are you affected by CVE-2023-46289?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST