Rockwell Automation RSLinx Classic
view advisory published 2020-04-09
Successful exploitation of this vulnerability could allow a local authenticated attacker to execute malicious code when opening RSLinx Classic.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10642US | high7.8 | — | ||
In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code u… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationRSLinx
Please refer to Rockwell Automation's security advisory on their website.
https://rockwellautomation.custhelp.com/ - FixedRSLinx
For versions 3.60 to 4.11 Rockwell Automation recommends users apply patch 1091155. Affected users are encouraged to apply the most recent version of RSLinx Classic.
https://selinc.com/support/?categories.Customer%20Service
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan