CVE-2020-12033: Input Validation
In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability in Rockwell Automation FactoryTalk Services Platform?
The vulnerability ID for this vulnerability in Rockwell Automation FactoryTalk Services Platform is CVE-2020-12033.
What is the severity level of CVE-2020-12033?
The severity level of CVE-2020-12033 is high with a severity value of 8.8.
How does CVE-2020-12033 impact Rockwell Automation FactoryTalk Services Platform?
CVE-2020-12033 allows an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges in Rockwell Automation FactoryTalk Services Platform.
What is the affected software for CVE-2020-12033?
The affected software for CVE-2020-12033 is Rockwell Automation FactoryTalk Services Platform.
Is there any fix available for CVE-2020-12033?
It is recommended to apply the latest security patches or updates provided by Rockwell Automation to mitigate the vulnerability CVE-2020-12033.