Rockwell Automation FactoryTalk View Site Edition

Summary

Vulnerabilities 1

• High 7.5
  CVE-2023-46289

  Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation

  Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to…

  Rockwell Automation FactoryTalk® View Site Edition ICS / OT
  Oct 27, 2023

Revision history

1. 2023-10-26 #1

   Initial Publication

References

• ICSA Advisory ICSA-23-299-05 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-05
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B