CVSS Score of 10 (low)


Published Jun 13, 2023
Updated: Jun 26, 2023
CWE ID 321
CWE ID 798


CVE-2023-2637 is a vulnerability found in Rockwell Automation's FactoryTalk System Services. The vulnerability arises from the use of a hard-coded cryptographic key to generate administrator cookies, potentially leading to privilege escalation. An authenticated non-admin user with local access may be able to exploit this vulnerability and generate an invalid administrator cookie, granting them administrative privileges to the FactoryTalk Policy Manager database. This could allow the attacker to make malicious changes that will be deployed when a legitimate user deploys a security policy model. Successful exploitation of this vulnerability requires user interaction.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-2637 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options