Rockwell Automation FactoryTalk Services Platform
Advisory ansehen veröffentlicht 2020-06-18
Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute remote COM objects with elevated privileges.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-12033US | high8.8 | — | ||
In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthen… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (1)
- MitigationFactoryTalk Services Platform
Affected users are encouraged to use Rockwell Automation Knowledgebase article 25612 to determine if FactoryTalk Services Platform is installed. Those using the affected product are directed to implement a secure communication strategy as outlined in Rockwell Automation Knowledgebase article 109056.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan