7.8
High
CVE-2020-14481 The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local,…
Description
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FactoryTalk View SE | 10.0 | No fix stated |
| FactoryTalk View SE 9.0 | earliest → 9.0 | No fix stated |
Other CVEs of FactoryTalk View SE
The 6 CVEs of FactoryTalk View SE →
CVE-2020-14480
Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker…
5.5
Medium
CVE-2020-12028
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to…
7.3
High
CVE-2020-12027
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system
4.3
Medium
CVE-2020-12031
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a…
7.5
High