CVE-2023-2071

Summary

CVE-2023-2071 is a vulnerability affecting Rockwell Automation's FactoryTalk View Machine Edition on the PanelView Plus. The issue lies in the improper input validation, enabling unauthenticated attackers to execute remote code by crafting malicious packets. The device's functionality includes executing exported functions from libraries through a CIP class. A routine limits the execution of specific functions from two dynamic link library files. However, an attacker can upload their own library, bypassing the security check and executing any code within the function.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.