What’s Vulnerable › Vulnerabilities

CVE-2023-46289: Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-27 · updated 2026-06-17
• Weakness: CWE-20

Description

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.

Affected products

• Rockwell Automation FactoryTalk View SE: from 11.0 through 13.0

References

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167

Get alerted when CVE-2023-46289 or the next vulnerability affects your stack