CVE-2020-14516

2021-03-1817:55:55

CWE-916

icscert

www.cve.org

rockwell automation

factorytalk services platform

sha-256

password hashing.

AI Score

9.6

Confidence

High

EPSS

0.016

Percentile

87.2%

JSON

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.

CNA Affected

[
  {
    "product": "Rockwell Automation FactoryTalk Services Platform",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v6.10.00, v6.11.00"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-054-01