CVE-2020-14516: Critical severity rockwell automation factorytalk services platform vulnerability

Published Mar 18, 2021

Updated

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.

Affected Software

3 affected components

rockwellautomation Factorytalk Services Platform=6.10.00

rockwellautomation Factorytalk Services Platform=6.11.00

Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00

Event History

Mar 18, 2021

CVE Published

via MITRE·05:55 PM

Data Sourced

via MITRE·05:55 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-21-054-01

Frequently Asked Questions

What is CVE-2020-14516?

CVE-2020-14516 is a vulnerability in Rockwell Automation FactoryTalk Services Platform versions 6.10.00 and 6.11.00.

How does CVE-2020-14516 impact Rockwell Automation FactoryTalk Services Platform?

CVE-2020-14516 affects the implementation of the SHA-256 hashing algorithm in FactoryTalk Services Platform, causing issues with password hashing.

What is the severity of CVE-2020-14516?

CVE-2020-14516 is considered critical with a severity value of 10.

Which versions of Rockwell Automation FactoryTalk Services Platform are affected by CVE-2020-14516?

CVE-2020-14516 affects versions 6.10.00 and 6.11.00 of Rockwell Automation FactoryTalk Services Platform.

How can I fix CVE-2020-14516?

To fix CVE-2020-14516, it is recommended to update Rockwell Automation FactoryTalk Services Platform to a patched version provided by the vendor.