CVE-2023-46289CWE-20

Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation

High · published October 27, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00898 · 59.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-10-27T18:28Z
EPSS history
Timeline
  • 27 OCT 18:28Z
    Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
    cvelistv5