Skip to content
OpenAdvisories
High ICSA-23-299-06 1 CVE

Rockwell Automation FactoryTalk Services Platform

Published Oct 26, 2023 · Updated Oct 26, 2023

Vendor: Rockwell Automation Product: FactoryTalk® Services Platform

Summary

Successful exploitation of this vulnerability could use a token to log into the system.

Vulnerabilities 1

  • High 8.1
    CVE-2023-46290

    Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability

    Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This v…

    Rockwell Automation FactoryTalk® Services Platform ICS / OT

Revision history

  1. #1

    Initial Publication

References