Read the docs

Rockwell

Records435All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high280CVSS 7.0–8.9

Exploited now

Rockwell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Factorytalk Linx · all components

Priority MEDIUM 62

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.447 Published 2020-12-29 No fix listed CWE-770
Priority MEDIUM 56

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11783 Published 2020-06-15 No fix listed CWE-20
Priority MEDIUM 56

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.29659 Published 2020-12-29 No fix listed CWE-755
Priority MEDIUM 52

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06815 Published 2020-11-26 No fix listed CWE-122
Priority MEDIUM 41

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0536 Published 2020-06-15 No fix listed CWE-22
Priority MEDIUM 40

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.02805 Published 2020-06-15 No fix listed CWE-20
Priority LOW 39

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03869 Published 2020-11-26 No fix listed CWE-122
Priority LOW 37

A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01917 Published 2020-11-26 No fix listed CWE-20
Priority LOW 37

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01842 Published 2020-06-15 No fix listed CWE-434
Priority LOW 32

An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.04776 Published 2020-12-29 No fix listed CWE-770
Open these records in search →