The vulnerability of the JMX console on the Rockwell Automation Pavilion8 platform for simulation, control, and optimization allows a intruder to gain unauthorized access to protected information or cause service failures.

🗓️ 19 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

JMX console flaw on Rockwell Pavilion eight enables unauthorized access or service failures due to weak authentication.

Reporter	Title	Published	Views	Family All 11
CNNVD	Rockwell Automation Pavilion8 授权问题漏洞	12 Sep 202300:00	–	cnnvd
CNVD	Rockwell Automation Pavilion8 License Issue Vulnerability	21 Sep 202300:00	–	cnvd
CVE	CVE-2023-29463	12 Sep 202316:42	–	cve
Cvelist	CVE-2023-29463 Pavilion8 Security Misconfiguration Vulnerability	12 Sep 202316:42	–	cvelist
EUVD	EUVD-2023-33032	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation Pavilion8	14 Sep 202306:00	–	ics
NVD	CVE-2023-29463	12 Sep 202317:15	–	nvd
OSV	CVE-2023-29463	12 Sep 202317:15	–	osv
Prion	Authentication flaw	12 Sep 202317:15	–	prion
Positive Technologies	PT-2023-5215 · Rockwell Automation · Pavilion8	6 Apr 202300:00	–	ptsecurity

Vulners

Node

rockwell_automation rockwell_automation_pavilion8Range<5.20

Source	Link
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140590
vuldb	www.vuldb.com/ru/
web	www.web.nvd.nist.gov/view/vuln/detail

19 Sep 2023 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 38.8

CVSS 29.3

EPSS0.00777

Rockwell Automation Pavilion eight platform Java Management Extensions unauthorized access service failures weak authentication