CVE-2023-2637

Summary

CVE-2023-2637 is a vulnerability affecting Rockwell Automation's FactoryTalk System Services. The issue arises from the use of a hard-coded cryptographic key in generating administrator cookies. An attacker who is a local, authenticated non-admin user can exploit this vulnerability by generating an invalid administrator cookie, thereby gaining administrative privileges to the FactoryTact Policy Manager database. This malicious access may result in unauthorized changes to the database, which will be deployed when a legitimate user deploys a security policy model. User interaction is necessary for the successful exploitation of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.