PT-2020-18724 · Rockwell Automation · Factorytalk Diagnostics

Published 2020-12-29 · Updated 2020-12-30 · CVE-2020-5807

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk Diagnostics versions prior to the fixed version

Description An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2020-5807

Affected Products

Factorytalk Diagnostics

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-5807 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5807 · Vendor Advisory
• https://tenable.com/security/research/tra-2020-71 · Note
• https://t.me/cibsecurity/21387 · Telegram Post
• https://t.me/cvenotify/7907 · Telegram Post
• https://t.me/cvenotify/7885 · Telegram Post