Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIcscertCVE-2020-12031
HistoryJul 20, 2020 - 4:15 p.m.

CVE-2020-12031

2020-07-2016:15:12
CWE-119
CWE-787
icscert
web.nvd.nist.gov
31
factorytalk view
se
memory corruption
vulnerability
cve-2020-12031
rockwell automation
patch 1126290

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.2%

JSON

In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.

Affected configurations

Nvd
Node
rockwellautomationfactorytalk_viewse
VendorProductVersionCPE
rockwellautomationfactorytalk_view*cpe:2.3:a:rockwellautomation:factorytalk_view:*:*:*:*:se:*:*:*

CNA Affected

[
  {
    "product": "FactoryTalk View SE",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Related

prion 1
nessus 2
cvelist 1
nvd 1
zdi 1
ics 1
prion
prion
Memory corruption
2020-07-20 16:15:00
nessus
nessus
Rockwell (CVE-2020-12031) (deprecated)
2022-02-07 00:00:00
Rockwellautomation Factorytalk Improper Restriction of Operations within the Bounds of a Memory Buffer
2021-08-10 00:00:00
cvelist
cvelist
CVE-2020-12031 Rockwell Automation FactoryTalk View SE
2020-07-20 15:10:06
nvd
nvd
CVE-2020-12031
2020-07-20 16:15:12
zdi
zdi
(Pwn2Own) Rockwell Automation FactoryTalk View SE Project File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability
2020-06-22 00:00:00
ics
ics
Rockwell Automation FactoryTalk View SE
2020-06-18 12:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.2%

JSON
Related for CVE-2020-12031
prion1nessus2cvelist1nvd1zdi1ics1