Resource exhaustion in Rockwellautomation Factorytalk Linx
CVE-2020-5802
An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.
EPSS: 0.388 (98.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Rockwellautomation Factorytalk_linx
- N/a Rockwell Factorytalk Linx — versions All versions of FactoryTalk Linx
Weakness classification (CWE)
References
- vulnreport@tenable.com (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-5802?
- CVE-2020-5802 is a high-severity vulnerability in Rockwellautomation Factorytalk Linx, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2020-12-29.
- How severe is CVE-2020-5802?
- High severity. CVSS v3 base score is 7.5 out of 10.