CVE-2023-2638

Summary

CVE-2023-2638 is a vulnerability affecting Rockwell Automation's FactoryTalk System Services. The issue lies in the FTSSBackupRestore.exe component, which fails to verify the password protection of backup configuration archives. An authenticated, non-admin user with local access can craft a malicious backup file without password protection, increasing the risk of unauthorized configuration modifications. Successful exploitation requires user interaction during the restore process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.