CVE-2020-12029

moderate-risk
Published 2020-07-20

All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell Automation recommends applying patch 1126289. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.

Do I need to act?

!
24.6% chance of exploitation in next 30 days
EPSS score — higher than 75% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.0/10 Critical
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Rockwellautomation

References (6)

Exploit http://packetstormsecurity.com/files/160156/Rockwell-FactoryTalk-View-SE-SCADA-U...
Vendor Advisory https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944
Third Party Advisory https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05
Exploit http://packetstormsecurity.com/files/160156/Rockwell-FactoryTalk-View-SE-SCADA-U...
Vendor Advisory https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944
Third Party Advisory https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05
47
/ 100
moderate-risk
Severity 27/34 · High
Exploitability 15/34 · Moderate
Exposure 5/34 · Minimal