CVE-2023-2746

Summary

CVE-2023-2746 is a vulnerability affecting the Rockwell Automation Enhanced HIM software. This issue stems from an API within the application that lacks sufficient protection. The API utilizes incorrect Cross-Origin Resource Sharing (CORS) settings, making it susceptible to Cross-Site Request Forgery (CSRF) attacks. Malicious actors can exploit this vulnerability by convincing users to click on malicious links through social engineering or by executing Cross-Site Scripting Attacks (XSS). Successful exploitation of a CSRF attack could potentially result in sensitive information disclosure and grant attackers full remote access to the affected products.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.