PT-2020-12974 · Rockwell Automation · Controlflash Plus+8

Chris Anastasio + 3 · Published 2020-06-15 · Updated 2021-11-04 · CVE-2020-12001

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk Linx versions 6.00 through 6.11 RSLinx Classic versions 4.11.00 and prior Connected Components Workbench versions 12 and prior ControlFLASH versions 14 and later ControlFLASH Plus versions 1 and later FactoryTalk Asset Centre versions 9 and later FactoryTalk Linx CommDTM versions 1 and later Studio 5000 Launcher versions 31 and later Studio 5000 Logix Designer software versions 32 and prior

Description The parsing mechanism that processes certain file types does not provide input sanitation, which may allow an attacker to use specially crafted files to traverse the file system, modify or expose sensitive data, or execute arbitrary code.

Recommendations For FactoryTalk Linx versions 6.00 through 6.11, consider disabling the file parsing mechanism until a patch is available. For RSLinx Classic versions 4.11.00 and prior, restrict access to the file system to minimize the risk of exploitation. For Connected Components Workbench versions 12 and prior, avoid using the vulnerable file types in the affected software until the issue is resolved. For ControlFLASH versions 14 and later, ControlFLASH Plus versions 1 and later, FactoryTalk Asset Centre versions 9 and later, FactoryTalk Linx CommDTM versions 1 and later, Studio 5000 Launcher versions 31 and later, and Studio 5000 Logix Designer software versions 32 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-12001

ZDI-20-733

Affected Products

Connected Components Workbench

Controlflash

Controlflash Plus

Factorytalk Assetcentre

Factorytalk Linx

Factorytalk Linx Commdtm

Rslinx Classic

Studio 5000 Launcher

Studio 5000 Logix Designer

References · 5

• https://osv.dev/vulnerability/CVE-2020-12001 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-733 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12001 · Security Note
• https://t.me/cvenotify/4391 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-20-163-02 · Note