Improper input validation in Rockwellautomation Factorytalk_linx
CVE-2020-12001
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: V…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.115 (95.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Rockwellautomation Factorytalk_linx — versions 6.00, 6.10, 6.11
- Rockwellautomation Rslinx_classic
- N/a Factorytalk Linx, Rslinx Classic, Connected Components Workbench, Controlflash Plus, Asset Centre, Linx Commdtm, Studio 5000 Launcher, Logix Designer Software — versions FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
- ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-12001?
- CVE-2020-12001 is a critical-severity vulnerability in Rockwellautomation Factorytalk_linx, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2020-06-15.
- How severe is CVE-2020-12001?
- Critical severity. CVSS v3 base score is 9.8 out of 10.