exploit/windows/scada/rockwell_factorytalk_rce

weaponized

Rockwell FactoryTalk View SE SCADA Unauthenticated Remote Code Execution

view exploit source metasploittype exploitpublished 2020-06-22catalog metasploit
01

exploited CVEs (3)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-12028UShigh8.1OT highExploit
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handl…
CVE-2020-12027USmedium4.3Exploit
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this informa…
CVE-2020-12029UShigh7.8Exploit
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan