CVE-2020-12031

low-risk
Published 2020-07-20

In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

Rockwellautomation

References (4)

Vendor Advisory https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944
Third Party Advisory https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05
Vendor Advisory https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944
Third Party Advisory https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05
25
/ 100
low-risk
Severity 20/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal