CVE-2020-12033

2020-06-2321:45:14

CWE-20

icscert

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

CNA Affected

[
  {
    "product": "Rockwell Automation FactoryTalk Services Platform",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-20-170-04