PT-2020-12998 · Rockwell Automation · Factorytalk View Se

Published 2020-03-26 · Updated 2021-09-23 · CVE-2020-12031

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk View SE versions (affected versions not specified)

Description The issue allows a local, authenticated attacker to corrupt the associated memory space, enabling arbitrary code execution after bypassing memory corruption mechanisms in the operating system.

Recommendations Apply patch 1126290, but first ensure the patch rollup dated 06 Apr 2020 or later is installed.

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2025-07154

CVE-2020-12031

ZDI-20-731

Affected Products

Factorytalk View Se

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-12031 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-731 · Security Note
• https://bdu.fstec.ru/vul/2025-07154 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-20-170-05 · Note