Rockwell Automation FactoryTalk Linx
Successful exploitation of these vulnerabilities could allow a denial-of-service condition, remote code execution, or leak information that could be used to bypass address space layout randomization (ASLR).
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-27255US | high7.5 | — | ||
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribu… | ||||
| CVE-2020-27253US | high7.5 | — | ||
A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to specifically cra… | ||||
| CVE-2020-27251US | critical9.8 | — | ||
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious port ranges… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationFactoryTalk Linx
Confirm that the least-privilege user principle is followed, and user/service account access to shared resources (such as a database) is only granted with a minimum amount of rights as needed.
- MitigationFactoryTalk Linx
Confirm that the least-privilege user principle is followed, and user/service account access to shared resources (such as a database) is only granted with a minimum amount of rights as needed.
- MitigationFactoryTalk Linx
Confirm that the least-privilege user principle is followed, and user/service account access to shared resources (such as a database) is only granted with a minimum amount of rights as needed.
- FixedFactoryTalk Linx
Rockwell Automation recommends users of the affected FactoryTalk Linx update to an available software revision that addresses the associated risk.
- FixedFactoryTalk Linx
Rockwell Automation recommends users of the affected FactoryTalk Linx update to an available software revision that addresses the associated risk.
- FixedFactoryTalk Linx
Rockwell Automation recommends users of the affected FactoryTalk Linx update to an available software revision that addresses the associated risk.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan