Vulnerability in Rockwellautomation Factorytalk Diagnostics
CVE-2020-5807
An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy_s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.338 (98.3th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.338 · newest: 0.338 · change: 0.000
Affected products
- Rockwellautomation Factorytalk Diagnostics
- Rockwell Factorytalk Diagnostics — versions All versions of FactoryTalk Diagnostics
Weakness classification (CWE)
References
- www.tenable.com/security/research/tra-2020-71 (Third Party Advisory)
Frequently asked questions
- What is CVE-2020-5807?
- CVE-2020-5807 is a high-severity vulnerability in Rockwellautomation Factorytalk Diagnostics, classified under Improper Handling of Exceptional Conditions. CVSS score: 7.5/10. Published 2020-12-29.
- How severe is CVE-2020-5807?
- High severity. CVSS v3 base score is 7.5 out of 10.