What is CVE-2020-14516?

CVE-2020-14516 is a critical-severity vulnerability in Rockwellautomation Factorytalk_services_platform, classified under Use of Password Hash With Insufficient Computational Effort. CVSS score: 10.0/10. Published 2021-03-18.

How severe is CVE-2020-14516?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Vulnerability in Rockwellautomation Factorytalk_services_platform

CVE-2020-14516

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being has…

EPSS: 0.041 (89.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Rockwellautomation Factorytalk_services_platform — versions 6.10.00, 6.11.00
N/a Rockwell Automation Factorytalk Services Platform — versions v6.10.00, v6.11.00

Weakness classification (CWE)

CWE-916 — Use of Password Hash With Insufficient Computational Effort

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-14516?: CVE-2020-14516 is a critical-severity vulnerability in Rockwellautomation Factorytalk_services_platform, classified under Use of Password Hash With Insufficient Computational Effort. CVSS score: 10.0/10. Published 2021-03-18.
How severe is CVE-2020-14516?: Critical severity. CVSS v3 base score is 10.0 out of 10.