Security News > 2020 > December > Flaws in Rockwell Automation Product Expose Engineering Workstations to Attacks
Vulnerabilities discovered by researchers in Rockwell Automation's FactoryTalk Linx product can allow attackers to compromise engineering workstations in industrial environments.
FactoryTalk Linx, formerly known as RSLinx Enterprise, is a widely used product designed for connecting Allen Bradley programmable logic controllers to Rockwell applications, including for programming, data acquisition and HMI interaction.
Rockwell Automation and the U.S. Cybersecurity and Infrastructure Security Agency last week published advisories to inform organizations using this product that researchers have identified three potentially serious vulnerabilities.
Another vulnerability, rated high severity, affects the Ingress/Egress checks routine of FactoryTalk Linx, and it can be exploited by a remote, unauthenticated attacker for denial-of-service attacks.
"In order to exploit these vulnerabilities, attackers would need to have network access to the Engineering Workstation machines. In many cases these machines are laptops, which means they are moving between networks and that makes them a good target for attackers," Sharon Brizinov, research team lead at Claroty, said via email.