Resource exhaustion in Rockwellautomation Factorytalk Linx

CVE-2020-5802

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.388 (98.5th percentile), scored .

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2020-5802: held from 0.388 to 0.388.

EPSS over last 30 days · oldest: 0.388 · newest: 0.388 · change: 0.000

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-5802?
CVE-2020-5802 is a high-severity vulnerability in Rockwellautomation Factorytalk Linx, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2020-12-29.
How severe is CVE-2020-5802?
High severity. CVSS v3 base score is 7.5 out of 10.