Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Vendor: Rockwell Component: Factorytalk Linx Clear all filters
TI-2020-04729 CVE-2020-5801 · GHSA-4jvq-wc69-2rqj

Improper handling of exceptional conditions in Rockwell FactoryTalk Linx

Priority MEDIUM 56

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.29659 Published 2020-12-29 No fix listed CWE-755
TI-2020-04734 CVE-2020-5806 · GHSA-3g7c-253j-whp9

Resource allocation without limits in Rockwell FactoryTalk Linx

Priority LOW 32

An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.04776 Published 2020-12-29 No fix listed CWE-770
TI-2020-04730 CVE-2020-5802 · GHSA-43mv-m2vr-rqqc

Resource allocation without limits in Rockwell FactoryTalk Linx

Priority MEDIUM 62

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.447 Published 2020-12-29 No fix listed CWE-770
TI-2020-16577 CVE-2020-27251 · GHSA-7hx6-pmgh-3p98

Heap-based buffer overflow in FactoryTalk Linx

Priority MEDIUM 52

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06815 Published 2020-11-26 No fix listed CWE-122
TI-2020-16581 CVE-2020-27255 · GHSA-q4jm-4p9g-2h6g

Heap-based buffer overflow in FactoryTalk Linx

Priority LOW 39

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03869 Published 2020-11-26 No fix listed CWE-122
TI-2020-16579 CVE-2020-27253 · GHSA-x592-jf8v-v754

Improper input validation in FactoryTalk Linx

Priority LOW 37

A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01917 Published 2020-11-26 No fix listed CWE-20
TI-2020-09664 CVE-2020-12005 · GHSA-p9x7-h752-wp55

Unrestricted file upload in FactoryTalk Linx, RSLinx Classic, Connected Components…

Priority LOW 37

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01842 Published 2020-06-15 No fix listed CWE-434
TI-2020-09662 CVE-2020-12003 · GHSA-fmjx-hmcg-x6hg

Path traversal in FactoryTalk Linx, RSLinx Classic, Connected Components Workbench…

Priority MEDIUM 41

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0536 Published 2020-06-15 No fix listed CWE-22
TI-2020-09660 CVE-2020-12001 · GHSA-rq3q-m2cf-pq6x

Improper input validation in FactoryTalk Linx, RSLinx Classic, Connected Components…

Priority MEDIUM 56

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11783 Published 2020-06-15 No fix listed CWE-20
TI-2020-09658 CVE-2020-11999 · GHSA-hjcj-7cv6-7vcj

Improper input validation in FactoryTalk Linx, RSLinx Classic, Connected Components…

Priority MEDIUM 40

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryT…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.02805 Published 2020-06-15 No fix listed CWE-20