Rockwell Products Impacted by Chromium Type Confusion

Risk Summary

Successful exploitation of this vulnerability could cause a denial-of-service condition.

CVEs (1)

Remediations

• Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
• Users currently utilizing the FactoryTalk View Site Edition web browser can manually download and apply the updated version of WebView2 by performing these recommended actions:
• Replace the Microsoft WebView2 file in the C:\Program Files (x86)\Rockwell Software\RS View Enterprise\Microsoft.WebView2.FixedVersionRuntime directory by copying and pasting the new version of the software into the folder.
• Users should be sure to not remove the contents of the folder before pasting the new file.
• Users currently utilizing Enhanced HIM (eHIM) for Power Flex 6000T drives should perform the following recommended actions to address the vulnerability:
• Update the Microsoft Edge browser to Version 99.0.1150 or later.
• Apply the update for eHIM when made available.
• If applying the mitigations noted above is not feasible, then see Rockwell Automation's Knowledgebase article, Security Best Practices (login required), for additional recommendations for maintaining adequate environment security posture.

Affected Vendors

Affected Products (4)

Affected Sectors

Multiple