What is CVE-2023-2071?

CVE-2023-2071 is a critical-severity vulnerability in Rockwell Automation Fa, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2023-09-12.

How severe is CVE-2023-2071?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Arbitrary file upload in Rockwell Automation Fa

CVE-2023-2071

Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The device has the functio…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.110 (95.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Rockwell Automation Fa — versions <=13.0
Rockwellautomation Factorytalk_view
Rockwellautomation Panelview_plus

Weakness classification (CWE)

References

PSIRT@rockwellautomation.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-2071?: CVE-2023-2071 is a critical-severity vulnerability in Rockwell Automation Fa, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2023-09-12.
How severe is CVE-2023-2071?: Critical severity. CVSS v3 base score is 9.8 out of 10.