Vulnerability · Published Oct 27, 2023 · Assigned by Rockwell
CVE-2023-46289Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
High 7.5
In plain English
A high-severity improper input validation in FactoryTalk® View Site Edition from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.7%top 22.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | FactoryTalk® View Site Edition | versions 11.0-13.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H