CVE-2023-2638 — MEDIUM (5.9)

Vulnerability Description

Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives. This vulnerability may allow a local, authenticated non-admin user to craft a malicious backup archive, without password protection, that will be loaded by FactoryTalk System Services as a valid backup when a restore procedure takes places. User interaction is required for this vulnerability to be successfully exploited.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Rockwellautomation	Factorytalk Policy Manager	6.11.0
Rockwellautomation	Factorytalk System Services	6.11.0

Related Weaknesses (CWE)

CWE-287

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683Permissions RequiredVendor Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683Permissions RequiredVendor Advisory

FAQ

What is CVE-2023-2638?

CVE-2023-2638 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe may lead to the loadin...

How severe is CVE-2023-2638?

CVE-2023-2638 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-2638?

Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Factorytalk Policy Manager, Rockwellautomation Factorytalk System Services.