Improper input validation in Rockwellautomation Factorytalk_linx
CVE-2020-11999
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: V…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.028 (84.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Rockwellautomation Factorytalk_linx — versions 6.00, 6.10, 6.11
- Rockwellautomation Rslinx_classic
- N/a Factorytalk Linx, Rslinx Classic, Connected Components Workbench, Controlflash Plus, Asset Centre, Linx Commdtm, Studio 5000 Launcher, Logix Designer Software — versions FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-11999?
- CVE-2020-11999 is a high-severity vulnerability in Rockwellautomation Factorytalk_linx, classified under Improper Input Validation. CVSS score: 8.1/10. Published 2020-06-15.
- How severe is CVE-2020-11999?
- High severity. CVSS v3 base score is 8.1 out of 10.