Resource exhaustion in Rockwellautomation Factorytalk Linx
CVE-2020-5802
An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.388 (98.5th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.388 · newest: 0.388 · change: 0.000
Affected products
- Rockwellautomation Factorytalk Linx
- Rockwell Factorytalk Linx — versions All versions of FactoryTalk Linx
Weakness classification (CWE)
References
- www.tenable.com/security/research/tra-2020-71 (Third Party Advisory)
Frequently asked questions
- What is CVE-2020-5802?
- CVE-2020-5802 is a high-severity vulnerability in Rockwellautomation Factorytalk Linx, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2020-12-29.
- How severe is CVE-2020-5802?
- High severity. CVSS v3 base score is 7.5 out of 10.