Vulnerability in Rockwell Automation Factorytalk View Se
CVE-2020-14481
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (4.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 5th percentile — 4.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Rockwell Automation Factorytalk View Se — versions unspecified, 10.0
- Rockwellautomation Factorytalk View — versions 10.0
Weakness classification (CWE)
References
- www.cisa.gov/uscert/ics/advisories/icsa-20-177-03 (US Government Resource, Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2020-14481?
- CVE-2020-14481 is a high-severity vulnerability in Rockwell Automation Factorytalk View Se, classified under Weak Encoding for Password. CVSS score: 7.8/10. Published 2022-02-24.
- How severe is CVE-2020-14481?
- High severity. CVSS v3 base score is 7.8 out of 10.