PT-2020-12997 · Rockwell Automation · Factorytalk View Se

Published 2020-01-30 · Updated 2022-01-04 · CVE-2020-12029

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions FactoryTalk View SE versions (affected versions not specified)

Description The issue is related to improper validation of input filenames within a project directory, allowing a remote, unauthenticated attacker to potentially execute a crafted file on a remote endpoint, resulting in remote code execution (RCE).

Recommendations Apply patch 1126289, but first ensure the patch rollup dated 06 Apr 2020 or later is installed. As a temporary workaround, consider restricting access to the project directory to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Relative Path Traversal

RCE

Weakness Enumeration

CWE-22

CWE-23

CWE-20

Related Identifiers

BDU:2025-07163

CVE-2020-12029

ZDI-20-730

Affected Products

Factorytalk View Se

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/rockwell_factorytalk_rce.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/160156/Rockwell-FactoryTalk-View-SE-SCADA-Unauthenticated-Remote-Code-Execution.html · Exploit
• https://zerodayinitiative.com/advisories/ZDI-20-730 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07163 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12029 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-20-170-05 · Note