{"id":"CVE-2023-46289","aliases":["EUVD-2023-50513","GHSA-pc6g-crww-hwrf"],"status":"published","title":"Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation","description":"Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01691,"percentile":0.77266,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2023-10-27T18:28:40Z","modified":"2026-06-17T06:30:35Z","products":[{"vendor":"rockwell automation","product":"factorytalk® view site edition"},{"vendor":"rockwellautomation","product":"factorytalk_view"}],"references":[{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167","tags":["x_transferred","Permissions Required","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46289"},{"url":"https://github.com/advisories/GHSA-pc6g-crww-hwrf"}],"sources":{"cve":[{"id":"CVE-2023-46289","title":"Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation","description":"\nRockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.\n\n","status":"published","published":"2023-10-27T18:28:40.936Z","modified":"2025-02-27T20:39:04.32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:23.309349Z"}],"euvd":[{"id":"EUVD-2023-50513","description":"\nRockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.\n\n","status":"published","published":"2023-10-27T18:28:40Z","modified":"2025-02-27T20:39:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:21.469581Z"}],"ghsa":[{"id":"GHSA-pc6g-crww-hwrf","title":"\nRockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which...","description":"\nRockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.\n\n","status":"published","published":"2023-10-27T21:30:22Z","modified":"2024-04-04T08:57:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:57:03.138275Z"}],"nvd":[{"id":"CVE-2023-46289","description":"\nRockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.\n\n","status":"published","published":"2023-10-27T19:15:41.493Z","modified":"2026-06-17T06:30:35.623Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:08:40.004465Z"}]}}