Skip to content
OpenAdvisories
Critical ICSA-24-004-01 2 CVEs

Rockwell Automation FactoryTalk Activation

Published Jan 4, 2024 · Updated Jan 4, 2024

Vendor: Rockwell Automation Product: Factory Talk Activation Manager

Summary

Successful exploitation of these vulnerabilities could result in a buffer overflow and allow the attacker to gain full access to the system.

Vulnerabilities 2

  • Critical 9.8
    CVE-2023-3935

    Wibu: Buffer Overflow in CodeMeter Runtime

    A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.

    Wibu codemeter-runtime
  • High 8.8
    CVE-2023-38545 Public exploit EPSS 78%

    This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the h…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #1

    Initial Publication

References