CVE-2020-12033

2020-06-2321:45:14

CWE-20

icscert

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

CNA Affected

[
  {
    "product": "Rockwell Automation FactoryTalk Services Platform",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-20-170-04