Vulnerabilities > Rockwellautomation > Factorytalk View

DATE CVE VULNERABILITY TITLE RISK
2022-02-24 CVE-2020-14481 Inadequate Encryption Strength vulnerability in Rockwellautomation Factorytalk View 10.0
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords.
local
low complexity
rockwellautomation CWE-326
7.8
2020-07-20 CVE-2020-12031 Out-of-bounds Write vulnerability in Rockwellautomation Factorytalk View
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution.
local
low complexity
rockwellautomation CWE-787
7.8
2020-07-20 CVE-2020-12028 Missing Authentication for Critical Function vulnerability in Rockwellautomation Factorytalk View
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions.
network
low complexity
rockwellautomation CWE-306
8.1
2020-07-20 CVE-2020-12027 Unspecified vulnerability in Rockwellautomation Factorytalk View
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system.
network
low complexity
rockwellautomation
4.3
2020-07-20 CVE-2020-12029 Unspecified vulnerability in Rockwellautomation Factorytalk View
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory.
local
low complexity
rockwellautomation
7.8