Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service Attack
CVE-2023-2638

5MEDIUM

Key Information:

Vendor
Rockwell Automation
Status
FactoryTalk System Services
Vendor
CVE Published:
13 June 2023

Summary

Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected.

 

Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives.  This vulnerability may allow a local, authenticated non-admin user to craft a malicious backup archive, without password protection, that will be loaded by FactoryTalk System Services as a valid backup when a restore procedure takes places. User interaction is required for this vulnerability to be successfully exploited.

Affected Version(s)

FactoryTalk System Services <= 6.20

References

https://rockwellautomation.custhelp.com/app/answers/answe...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sharon Brizinov of Claroty Research - Team82
.