The vulnerability of the FactoryTalk Linx automation system’s software, related to deficiencies in handling exceptional states, allows a perpetrator to complete the RSLinxNG.exe process.

The vulnerability of the FactoryTalk Linx automation system’s software is related to deficiencies in handling exceptional states. Exploiting this vulnerability could allow a malicious actor to successfully execute the RSLinxNG.exe process by sending a specially crafted ConfigureItems message via...

CVE-2020-5802

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions ...

Design/Logic Flaw

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions ...