Log in Start free

Vulnerability · Published Jun 13, 2023 · Assigned by Rockwell

CVE-2023-2778Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service

High 7.5

In plain English

A high-severity uncontrolled resource consumption in FactoryTalk Transaction Manager from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.2%top 31.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If exploited, the application could potentially crash or experience a high CPU or memory usage condition, causing intermittent application functionality issues. The application would need to be restarted to recover from the DoS.

Affected products (as reported)

VendorProductVersions
Rockwell Automation FactoryTalk Transaction Manager <=v13.10

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References