Vulnerability · Published Nov 26, 2020 · Assigned by icscert
CVE-2020-27255
High 7.5
In plain English
A high-severity heap buffer overflow in FactoryTalk Linx. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.9% (higher than 90% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)3.9%top 9.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to the bypass of address space layout randomization (ASLR).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | FactoryTalk Linx | Version 6.11 and prior |
Weakness: CWE-122
References
- https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01 x_refsource_MISC