CVE-2023-2637
CVSS 3.1 Score 8.2 of 10 (high)
Details
Summary
CVE-2023-2637 is a vulnerability affecting Rockwell Automation's FactoryTalk System Services. The issue arises from the use of a hard-coded cryptographic key in generating administrator cookies. An attacker who is a local, authenticated non-admin user can exploit this vulnerability by generating an invalid administrator cookie, thereby gaining administrative privileges to the FactoryTact Policy Manager database. This malicious access may result in unauthorized changes to the database, which will be deployed when a legitimate user deploys a security policy model. User interaction is necessary for the successful exploitation of this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Rockwell Automation
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions