CVE-2023-29464: falha de alta gravidade em Rockwell Automation FactoryTalk Linx
Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
26Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.2epss 15%
FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Sending a size larger than the buffer size results in leakage of data from memory resulting in an information disclosure. If the size is large enough, it causes communications over the common industrial protocol to become unresponsive to any type of packet, resulting in a denial-of-service to FactoryTalk Linx over the common industrial protocol.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Produtos afetados
Rockwell Automation · FactoryTalk LinxCVEs relacionadas — Rockwell Automation FactoryTalk Linx
No mesmo produto, das mais perigosas para as menos.