ICS Advisory: Rockwell Automation FactoryTalk View Site Edition

Summary:

A critical vulnerability was discovered in Rockwell Automation's FactoryTalk View Site Edition V11.0, allowing threat actors to send malicious data and bring the product offline, resulting in a denial-of-service condition. The vulnerability is caused by improper input validation and has a CVSS v3 score of 7.5. Rockwell Automation has released patches for versions v11.0, v12.0, and v13.0, and recommends implementing security best practices to minimize the risk of exploitation. CISA also provides recommendations for minimizing network exposure, securing remote access, and implementing defense-in-depth strategies.