CVE-2020-12028
Rockwell Automation FactoryTalk View SE
- State
- Published
- Severity
- 7.3 High
- Published
- Jul 20, 2020
- Updated
- Sep 16, 2024
- Reserved
- Apr 21, 2020
Description
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | icscert |
Weaknesses
- CWE-264 PERMISSIONS, PRIVILEGES, AND ACCESS CONTROLS CWE-264
Affected Products
| Product | Versions |
|---|---|
FactoryTalk View SERockwell Automation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.