CVE Vulnerability

CVE-2020-27255

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacker to send malicious set attribute requests, which could result in the leaking of sensitive information. This information disclosure could lead to the bypass of address space layout randomization (ASLR).

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

Scope

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-329-01 Third Party Advisory US Government Resource
Configurations

Configuration 1

cpe:2.3:a:rockwellautomation:factorytalk_linx:*:*:*:*:*:*:*:*
Information

Published : 2020-11-26 02:15

Updated : 2020-11-30 07:33

NVD link : CVE-2020-27255

Mitre link : CVE-2020-27255

Products Affected
No products.
CWE
CWE-122