CVE-2023-46289CWE-20
Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
High · published October 27, 2023
What it is
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00898 · 59.2th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2023-10-27T18:28Z
EPSS history
Timeline