CVE-2020-5802

🗓️ 29 Dec 2020 15:04:26Reported by tenableType

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-5802	29 Dec 202018:29	–	circl
CNNVD	Rockwell Automation FactoryTalk Linx Code Issue Vulnerability	29 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-5802	29 Dec 202015:04	–	cvelist
EUVD	EUVD-2020-26959	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform	28 Jan 202100:00	–	ics
NVD	CVE-2020-5802	29 Dec 202016:15	–	nvd
OSV	CVE-2020-5802	29 Dec 202016:15	–	osv
Tenable Nessus	Rockwellautomation Factorytalk Improper Handling of Exceptional Conditions	10 Aug 202100:00	–	nessus
Tenable Nessus	Rockwell (CVE-2020-5802) (deprecated)	7 Feb 202200:00	–	nessus
Prion	Design/Logic Flaw	29 Dec 202016:15	–	prion

NVD

Node

rockwellautomation factorytalk_linxRange≤6.11

[
  {
    "product": "Rockwell FactoryTalk Linx",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of FactoryTalk Linx"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2020-71

21 Nov 2024 05:34Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.00997

CWE-770