What’s Vulnerable › Vulnerabilities

CVE-2023-2778: Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-13 · updated 2026-06-17
• Weakness: CWE-400

Description

A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If exploited, the application could potentially crash or experience a high CPU or memory usage condition, causing intermittent application functionality issues. The application would need to be restarted to recover from the DoS.

Affected products

• Rockwell Automation FactoryTalk Transaction Manager: through 13.10

References

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139744
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139744

Get alerted when CVE-2023-2778 or the next vulnerability affects your stack