CVE-2020-12033

EPSS 1.1%CWE-20

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

23 jun 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

Productos afectados

n/a · Rockwell Automation FactoryTalk Services Platform

Referencias

https://www.us-cert.gov/ics/advisories/icsa-20-170-04