An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affected.
References
Link | Resource |
---|---|
https://www.tenable.com/security/research/tra-2020-71 | Third Party Advisory |
Configurations
History
30 Dec 2020, 18:13
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://www.tenable.com/security/research/tra-2020-71 - Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CWE | CWE-755 | |
CPE | cpe:2.3:a:rockwellautomation:factorytalk_linx:*:*:*:*:*:*:*:* |
29 Dec 2020, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2020-12-29 16:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-5801
Mitre link : CVE-2020-5801
CVE.ORG link : CVE-2020-5801
JSON object : View
Products Affected
rockwellautomation
- factorytalk_linx
CWE
CWE-755
Improper Handling of Exceptional Conditions