Read the docs
TI-2020-04735 Aliases CVE-2020-5807GHSA-f3hv-32hf-cqw9

Improper handling of exceptional conditions in Rockwell FactoryTalk Diagnostics

Priority MEDIUM 60CWE-755Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy_s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected.

Why it matters now

EPSS 0.39304 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Rockwell FactoryTalk DiagnosticsAll versions of FactoryTalk Diagnostics—No fix listedCNA
  • Rockwell FactoryTalk Diagnostics Vendor— Affected All versions of FactoryTalk Diagnostics Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rockwellautomation:factorytalk_diagnostics:*:*:*:*:*:*:*:*up to 6.11VulnerableRockwell
  • cpe:2.3:a:rockwellautomation:factorytalk_diagnostics:*:*:*:*:*:*:*:* Versions up to 6.11 Vulnerable ·Rockwell

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-5807
  2. 2026-10-03 Alias added: GHSA-f3hv-32hf-cqw9

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences