Read the docs
TI-2023-24910 Aliases CVE-2023-46290GHSA-5gjm-5h8m-h8w7

Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability

Priority MEDIUM 45CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.05104 92nd percentileScored 2026-11-07
Fix Fixed FactoryTalk® Services Platform (Rockwell Automation): 2.80

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellFactoryTalk® Services Platformbefore 2.802.80Patch availableCNA
  • FactoryTalk® Services Platform VendorRockwell Affected before 2.80 Fixed in 2.80 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*before 2.80VulnerableRockwell
  • cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:* Versions before 2.80 Vulnerable ·Rockwell

Remediation

  • Fix · CNA FactoryTalk® Services Platform (Rockwell Automation) Fixed in 2.80

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-46290
  2. 2026-10-03 Alias added: GHSA-5gjm-5h8m-h8w7
  3. 2026-10-27 EPSS moved to the 90th–95th percentile

References

Advisory 1

  • TI-2021-05574 Insufficiently protected credentials in Rockwell Automation Studio 5000 Logix Designer… KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-14577 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2020-11367 In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there… CVSS 3.1CRITICAL 10.0
  • TI-2020-05615 Deserialization of untrusted data in Rockwell Automation All versions of FactoryTalk… CVSS 3.1CRITICAL 9.8
  • TI-2021-12569 Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure CVSS 3.1HIGH 8.8
  • TI-2024-14575 Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality CVSS 3.1CRITICAL 9.0
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences