Vulnerability · Published Jul 20, 2020 · Assigned by icscert

CVE-2020-12027Rockwell Automation FactoryTalk View SE

Medium 4.3

In plain English

A medium-severity information exposure in FactoryTalk View SE from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 53.0% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)53.0%top 1.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Metasploit

Official description

All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs.

Affected products (as reported)

Vendor	Product	Versions
Rockwell Automation	FactoryTalk View SE	all versions

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05 x_refsource_MISC
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944 x_refsource_MISC
http://packetstormsecurity.com/files/160156/Rockwell-FactoryTalk-View-SE-SCADA-Unauthenticated-Remote-Code-Execution.html x_refsource_MISC