PT-2020-16669 · Rockwell Automation · Factorytalk Linx

Published 2020-11-24 · Updated 2020-11-30 · CVE-2020-27255

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FactoryTalk Linx versions 6.11 and prior

Description A heap overflow issue exists, allowing a remote, unauthenticated attacker to send malicious set attribute requests. This could result in the leaking of sensitive information, potentially leading to the bypass of address space layout randomization (ASLR).

Recommendations For versions 6.11 and prior, update to a version later than 6.11 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-07808

CVE-2020-27255

Affected Products

Factorytalk Linx

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2020-27255 · Security Note
• https://bdu.fstec.ru/vul/2025-07808 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27255 · Vendor Advisory
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1536.html · Note
• https://t.me/cibsecurity/16863 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-20-329-01 · Note
• https://t.me/cvenotify/6351 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01 · Note
• https://t.me/cvenotify/6238 · Telegram Post