How severe is CVE-2023-2071?

CVE-2023-2071 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2023-2071 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 11% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-2071?

CVE-2023-2071 affects Rockwellautomation Factorytalk View. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2023-2071?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2023-2071 published?

CVE-2023-2071 was published on 2023-09-12 and last updated on 2026-06-17.

CVE-2023-2071

CVE-2023-2071 is a critical-severity vulnerability in Rockwellautomation Factorytalk View with a CVSS 3.x base score of 9.8. Its EPSS exploit-prediction score of 11% places it in the 96th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-434.

Key facts

Severity: Critical (CVSS 3.x base score 9.8)
EPSS exploit prediction: 11% (96th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-434
Affected product: Rockwellautomation Factorytalk View
Published: 2023-09-12
Last modified: 2026-06-17

Description

Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The device has the functionality, through a CIP class, to execute exported functions from libraries. There is a routine that restricts it to execute specific functions from two dynamic link library files. By using a CIP class, an attacker can upload a self-made library to the device which allows the attacker to bypass the security check and execute any code written in the function.

Frequently asked questions

What is CVE-2023-2071?: Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The device has the functionality, through a CIP class, to execute exported functions from libraries. There is a routine that restricts it to execute specific functions from two dynamic link library files. By using a CIP class, an attacker can upload a self-made library to the device which allows the attacker to bypass the security check and execute any code written in the function.
How severe is CVE-2023-2071?: CVE-2023-2071 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2023-2071 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 11% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-2071?: CVE-2023-2071 affects Rockwellautomation Factorytalk View. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2023-2071?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2023-2071 published?: CVE-2023-2071 was published on 2023-09-12 and last updated on 2026-06-17.

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140724

Affected products (1)

cpe:2.3:a:rockwellautomation:factorytalk_view:*:*:*:*:machine:*:*:*

More vulnerabilities in Rockwellautomation Factorytalk View

CVE-2025-9063 — Critical (CVSS 9.8): An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control.…
CVE-2024-45824 — Critical (CVSS 9.8): CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when…
CVE-2024-4609 — Critical (CVSS 9.8): A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat…
CVE-2025-9064 — Critical (CVSS 9.1): A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on…
CVE-2020-12029 — Critical (CVSS 9.0): All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote,…
CVE-2024-7513 — High (CVSS 8.8): CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to…

All CVEs affecting Rockwellautomation Factorytalk View →

Other CWE-434 (Unrestricted Upload of File with Dangerous Type) vulnerabilities

CVE-2026-75949 — Critical (CVSS 10.0): Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 -…
CVE-2026-74803 — Critical (CVSS 10.0): Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts…
CVE-2026-66665 — Critical (CVSS 10.0): Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.
CVE-2026-61900 — Critical (CVSS 10.0): Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla…
CVE-2026-61424 — Critical (CVSS 10.0): Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla…
CVE-2026-57719 — Critical (CVSS 10.0): Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using…

Browse all CWE-434 (Unrestricted Upload of File with Dangerous Type) vulnerabilities →