What is CVE-2020-14481?

CVE-2020-14481 is a high-severity vulnerability in Rockwell Automation Factorytalk View Se, classified under Weak Encoding for Password. CVSS score: 7.8/10. Published 2022-02-24.

How severe is CVE-2020-14481?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Rockwell Automation Factorytalk View Se

CVE-2020-14481

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Rockwell Automation Factorytalk View Se — versions unspecified, 10.0
Rockwellautomation Factorytalk_view — versions 10.0

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2020-14481?: CVE-2020-14481 is a high-severity vulnerability in Rockwell Automation Factorytalk View Se, classified under Weak Encoding for Password. CVSS score: 7.8/10. Published 2022-02-24.
How severe is CVE-2020-14481?: High severity. CVSS v3 base score is 7.8 out of 10.