High severity · published Oct 27, 2023
CVE-2023-46289
Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
7.5
CVSS
1.7%
EPSS
No
On KEV
Description
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
FactoryTalk® View Site Edition · Rockwell Automation
versions 11.0-13.0 · source: vendor
FV
Factorytalk View · Rockwellautomation
11.0 through 13.0 · source: NVD
Affected product
FV
FactoryTalk® View Site Edition
Rockwell Automation
More from FactoryTalk® View Site Edition
9.8
CVE-2024-45824
FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation
8.8
CVE-2024-7513
Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions
7.0
CVE-2025-24482
FactoryTalk® View Site Edition - Local Code Injection
7.0
CVE-2025-24481
FactoryTalk® View Site Edition - Incorrect Permission Assignment