Vulnerabilitycritical

Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus

The Hacker Newsby @TheHackersNewsJul 5, 2024 · 03:27 UTC (Jul 5, 2024)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2023-2071 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-2071 CVE-2023-29464 CVE-2024-23692

Tags: cve-2023-2071 cve-2023-29464 cve-2024-23692 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-2071	Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve…	9.8	11%		Sep 12, 2023
CVE-2023-29464	FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets	9.1	10%		Oct 13, 2023
CVE-2024-23692	Unauthenticated Template Injection RCE in Rejetto HTTP File Server 2.3m	9.8	99%	KEVRansomwarePoC ×5	May 31, 2024 KEV Jul 9, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jul 04, 2024 Vulnerability / Critical Infrastructure Microsoft has revealed two security flaws in Rockwell Automation PanelView Plus that could be weaponized by remote, unauthenticated attackers to execute arbitrary code and trigger a denial-of-service (DoS) condition.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.