Vulnerability in Rockwellautomation Factorytalk Diagnostics
CVE-2020-5807
An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy_s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected.
EPSS: 0.338 (98.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Rockwellautomation Factorytalk_diagnostics
- N/a Rockwell Factorytalk Diagnostics — versions All versions of FactoryTalk Diagnostics
Weakness classification (CWE)
References
- vulnreport@tenable.com (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-5807?
- CVE-2020-5807 is a high-severity vulnerability in Rockwellautomation Factorytalk Diagnostics, classified under Improper Handling of Exceptional Conditions. CVSS score: 7.5/10. Published 2020-12-29.
- How severe is CVE-2020-5807?
- High severity. CVSS v3 base score is 7.5 out of 10.