Skip to content
Sign in
Not rated

CVE-2020-5802 An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a…

Description

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.

Affected products and versions

Product Affected versions Fixed in
Rockwell FactoryTalk Linx Versions not published

Other CVEs of Rockwell FactoryTalk Linx

The 3 CVEs of Rockwell FactoryTalk Linx →
CVE-2020-5801 An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled… Not rated CVE-2020-5806 An attacker-controlled memory allocation size can be passed to the C++ new operator in the… Not rated
Track this CVE