Skip to content
Sign in
Not rated

CVE-2020-5806 An attacker-controlled memory allocation size can be passed to the C++ new operator in the…

Description

An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll. This can be done by sending a specially crafted message to 127.0.0.1:7153. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affected.

Affected products and versions

Product Affected versions Fixed in
Rockwell FactoryTalk Linx Versions not published

Other CVEs of Rockwell FactoryTalk Linx

The 3 CVEs of Rockwell FactoryTalk Linx →
CVE-2020-5801 An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled… Not rated CVE-2020-5802 An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a… Not rated
Track this CVE