Published: 27/10/2023 Updated: 07/11/2023

CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2

VMScore: 0

Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rockwellautomation factorytalk services platform

Rockwell Automation warns admins to take ICS devices offline

BleepingComputer • Sergiu Gatlan • 21 May 2024

Rockwell Automation warns admins to take ICS devices offline By Sergiu Gatlan May 21, 2024 01:48 PM 0 Rockwell Automation warned customers to disconnect all industrial control systems (ICSs) not designed for online exposure from the Internet due to increasing malicious activity worldwide. Network defenders should never configure such devices to allow remote connections from systems outside the local network. By taking them offline, they can drastically reduce their organizations' attack surface....

CVE-2023-46290

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect