Vulnerabilities > Rockwellautomation > Factorytalk View > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-07-20 CVE-2020-12031 Out-of-bounds Write vulnerability in Rockwellautomation Factorytalk View
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution.
local
low complexity
rockwellautomation CWE-787
4.6
2020-07-20 CVE-2020-12028 Missing Authentication for Critical Function vulnerability in Rockwellautomation Factorytalk View
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions.
network
low complexity
rockwellautomation CWE-306
5.5
2020-07-20 CVE-2020-12027 Unspecified vulnerability in Rockwellautomation Factorytalk View
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system.
network
low complexity
rockwellautomation
4.0
2020-07-20 CVE-2020-12029 Improper Input Validation vulnerability in Rockwellautomation Factorytalk View
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory.
6.8