Arbitrary file upload in Rockwell Automation Fa
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The device has the functionality, through a CIP class, to execute exported functions from libraries. There is a routine that restricts it to execute specific functions from two dynamic link library files. By using a CIP class, an attacker can upload a self-made library to the device which allows the attacker to bypass the security check and execute any code written in the function.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.173 (97.0th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 97.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.110 · newest: 0.173 · change: +0.063
Affected products
Weakness classification (CWE)
References
- rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140724 (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-2071?
- CVE-2023-2071 is a critical-severity vulnerability in Rockwell Automation Fa, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2023-09-12.
- How severe is CVE-2023-2071?
- Critical severity. CVSS v3 base score is 9.8 out of 10.