{"id":"CVE-2023-46289","state":"PUBLISHED","title":"Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation","description":"\nRockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.\n\n","publishedAt":"2023-10-27T18:28:40.936Z","updatedAt":"2025-02-27T20:39:04.320Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"Rockwell"},"assigner":"Rockwell","products":["Rockwell Automation FactoryTalk® View Site Edition "],"affected":[{"vendor":"Rockwell Automation","product":"FactoryTalk® View Site Edition ","defaultStatus":"unaffected","versions":[{"version":"versions 11.0-13.0","status":"affected"}]}],"references":["https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:06:24.729Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/46xxx/CVE-2023-46289.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-46289","state":"PUBLISHED","datePublished":"2023-10-27T18:28:40.936Z","dateUpdated":"2025-02-27T20:39:04.320Z","assignerShortName":"Rockwell","assignerOrgId":"b73dd486-f505-4403-b634-40b078b177f0","dateReserved":"2023-10-20T18:01:46.095Z"},"containers":{"cna":{"title":"Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation","descriptions":[{"lang":"en","value":"\nRockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.\n\n"}],"affected":[{"vendor":"Rockwell Automation","product":"FactoryTalk® View Site Edition ","defaultStatus":"unaffected","versions":[{"version":"versions 11.0-13.0","status":"affected"}]}],"references":[{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Rockwell","orgId":"b73dd486-f505-4403-b634-40b078b177f0","dateUpdated":"2023-10-27T18:28:40.936Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"This vulnerability was found internally during routine testing."}],"datePublic":"2023-10-26T13:00:00.000Z","impacts":[{"capecId":"CAPEC-629","descriptions":[{"lang":"en","value":"CAPEC-629 Unauthorized Use of Device Resources"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\n\n<ul><li>Install the patch that remediates the issue: <a target=\"_blank\" rel=\"nofollow\" href=\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140243\">BF29581 - Patch: External Service Interaction (HTTP), FactoryTalk View SE 11.0, 12.0 13.0</a>.</li></ul>"}],"value":"\n  *  Install the patch that remediates the issue:  BF29581 - Patch: External Service Interaction (HTTP), FactoryTalk View SE 11.0, 12.0 13.0 https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140243 .\n\n\n"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T20:45:40.738Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-26T21:50:01.999696Z","id":"CVE-2023-46289","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-27T20:39:04.320Z"}}]}}}