What is CVE-2023-46289?

CVE-2023-46289 is a high-severity vulnerability in Rockwell Automation Factorytalk® View Site Edition, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2023-10-27.

How severe is CVE-2023-46289?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Rockwell Automation Factorytalk® View Site Edition

CVE-2023-46289

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.009 (55.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Rockwell Automation Factorytalk® View Site Edition — versions versions 11.0-13.0
Rockwellautomation Factorytalk_view

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

PSIRT@rockwellautomation.com (Permissions Required, Vendor Advisory)

Frequently asked questions

What is CVE-2023-46289?: CVE-2023-46289 is a high-severity vulnerability in Rockwell Automation Factorytalk® View Site Edition, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2023-10-27.
How severe is CVE-2023-46289?: High severity. CVSS v3 base score is 7.5 out of 10.