PT-2022-8569 · Rockwell Automation · Factorytalk View Se

Published 2022-02-24 · Updated 2022-03-04 · CVE-2020-14481

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk View SE (affected versions not specified)

Description The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

CWE-261

Related Identifiers

CVE-2020-14481

Affected Products

Factorytalk View Se

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-14481 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14481 · Vendor Advisory
• https://t.me/cvenotify/27359 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-20-177-03 · Note
• https://t.me/cibsecurity/38040 · Telegram Post