{"id":"CVE-2023-2778","state":"PUBLISHED","title":"Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service","description":"\nA denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If exploited, the application could potentially crash or experience a high CPU or memory usage condition, causing intermittent application functionality issues. The application would need to be restarted to recover from the DoS.","publishedAt":"2023-06-13T20:35:18.449Z","updatedAt":"2025-03-05T18:57:49.583Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"Rockwell"},"assigner":"Rockwell","products":["Rockwell Automation FactoryTalk Transaction Manager"],"affected":[{"vendor":"Rockwell Automation","product":"FactoryTalk Transaction Manager","defaultStatus":"unaffected","versions":[{"version":"<=v13.10","status":"affected"}]}],"references":["https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139744"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/2xxx/CVE-2023-2778.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-2778","state":"PUBLISHED","datePublished":"2023-06-13T20:35:18.449Z","dateUpdated":"2025-03-05T18:57:49.583Z","assignerShortName":"Rockwell","assignerOrgId":"b73dd486-f505-4403-b634-40b078b177f0","dateReserved":"2023-05-17T18:40:49.427Z"},"containers":{"cna":{"title":"Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service","descriptions":[{"lang":"en","value":"\nA denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If exploited, the application could potentially crash or experience a high CPU or memory usage condition, causing intermittent application functionality issues. The application would need to be restarted to recover from the DoS."}],"affected":[{"vendor":"Rockwell Automation","product":"FactoryTalk Transaction Manager","defaultStatus":"unaffected","versions":[{"version":"<=v13.10","status":"affected"}]}],"references":[{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139744"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Rockwell","orgId":"b73dd486-f505-4403-b634-40b078b177f0","dateUpdated":"2023-06-13T20:35:18.449Z"},"datePublic":"2023-06-13T14:00:00.000Z","impacts":[{"capecId":"CAPEC-130","descriptions":[{"lang":"en","value":"CAPEC-130 Excessive Allocation"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\n\n<span style=\"background-color: rgb(255, 255, 255);\">Customers using the affected software are encouraged to apply the risk mitigations below, if possible. Additionally, we encourage our customers to implement our suggested security best practices to minimize the risk of the vulnerability.</span><ul><li>Customers should follow the instructions in <a target=\"_blank\" rel=\"nofollow\" href=\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138425\">BF29042 - Patch: Multiple issues, FactoryTalk Transaction Manager 13.00/13.10</a>&nbsp;to install the patch to mitigate the issue.</li></ul>\n\n<br>"}],"value":"\nCustomers using the affected software are encouraged to apply the risk mitigations below, if possible. Additionally, we encourage our customers to implement our suggested security best practices to minimize the risk of the vulnerability.  *  Customers should follow the instructions in  BF29042 - Patch: Multiple issues, FactoryTalk Transaction Manager 13.00/13.10 https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138425  to install the patch to mitigate the issue.\n\n\n\n\n\n"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139744","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T06:33:05.706Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-05T18:39:13.617844Z","id":"CVE-2023-2778","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-05T18:57:49.583Z"}}]}}}