Rockwell Automation FactoryTalk Linx
Successful exploitation of these vulnerabilities could allow a denial-of-service condition, remote code execution, or leak information that could be used to bypass address space layout randomization (ASLR).
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-27255US | high7.5 | — | ||
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribu… | ||||
| CVE-2020-27253US | high7.5 | — | ||
A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to specifically cra… | ||||
| CVE-2020-27251US | critical9.8 | — | ||
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious port ranges… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationFactoryTalk Linx
Confirm that the least-privilege user principle is followed, and user/service account access to shared resources (such as a database) is only granted with a minimum amount of rights as needed.
- MitigationFactoryTalk Linx
Confirm that the least-privilege user principle is followed, and user/service account access to shared resources (such as a database) is only granted with a minimum amount of rights as needed.
- MitigationFactoryTalk Linx
Confirm that the least-privilege user principle is followed, and user/service account access to shared resources (such as a database) is only granted with a minimum amount of rights as needed.
- BehobenFactoryTalk Linx
Rockwell Automation recommends users of the affected FactoryTalk Linx update to an available software revision that addresses the associated risk.
- BehobenFactoryTalk Linx
Rockwell Automation recommends users of the affected FactoryTalk Linx update to an available software revision that addresses the associated risk.
- BehobenFactoryTalk Linx
Rockwell Automation recommends users of the affected FactoryTalk Linx update to an available software revision that addresses the associated risk.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan