CVE-2023-29464: Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure
First published: Fri Oct 13 2023(Updated: )
FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Sending a size larger than the buffer size results in leakage of data from memory resulting in an information disclosure. If the size is large enough, it causes communications over the common industrial protocol to become unresponsive to any type of packet, resulting in a denial-of-service to FactoryTalk Linx over the common industrial protocol.
Credit: PSIRT@rockwellautomation.com PSIRT@rockwellautomation.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rockwellautomation Factorytalk Linx | =6.20 | |
| Rockwellautomation Factorytalk Linx | =6.30 |
Remedy
* Install the security patches for the respective versions, referencing BF29637 - Patch: Hardening of the FactoryTalk Linx communications service for MobileView to authenticate and block improperly sized files, FactoryTalk Linx 6.20, 6.30 https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140402 .
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-29464?
CVE-2023-29464 is a vulnerability in FactoryTalk Linx in the Rockwell Automation PanelView Plus that allows an unauthenticated threat actor to read data from memory via crafted malicious packets.
What is the severity of CVE-2023-29464?
The severity of CVE-2023-29464 is critical with a CVSS score of 9.1.
How does CVE-2023-29464 work?
CVE-2023-29464 works by allowing an unauthenticated threat actor to send crafted malicious packets with a size larger than the buffer size, resulting in leakage of data from memory and information disclosure.
Which software versions are affected by CVE-2023-29464?
CVE-2023-29464 affects FactoryTalk Linx versions 6.20 and 6.30 in the Rockwell Automation PanelView Plus.
How can CVE-2023-29464 be fixed?
To fix CVE-2023-29464, it is recommended to upgrade to a patched version of FactoryTalk Linx provided by Rockwell Automation.
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/tags
- agent/first-publish-date
- vendor/rockwellautomation
- canonical/rockwellautomation factorytalk linx
- version/rockwellautomation factorytalk linx/6.20
- version/rockwellautomation factorytalk linx/6.30