CVE-2020-27255

State: Published
Severity: Not scored
Published: Nov 26, 2020
Updated: Aug 4, 2024
Reserved: Oct 19, 2020

Description

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to the bypass of address space layout randomization (ASLR).

Scores

The record has no CVSS score.

Weaknesses

CWE-122 HEAP-BASED BUFFER OVERFLOW CWE-122

Affected Products

Product	Versions
FactoryTalk Linxn/a	Version 6.11 and priorAffected

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.