Vulnerability · Published Jul 20, 2020 · Assigned by icscert

CVE-2020-12031Rockwell Automation FactoryTalk View SE

High 7.5

In plain English

A high-severity memory corruption in FactoryTalk View SE from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.6%top 51.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.

Affected products (as reported)

Vendor	Product	Versions
Rockwell Automation	FactoryTalk View SE	all versions

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05 x_refsource_MISC
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944 x_refsource_MISC