7.8
Élevée
CVE-2020-14481 The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local,…
Description
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FactoryTalk View SE | 10.0 | Pas de correctif indiqué |
| FactoryTalk View SE 9.0 | premières → 9.0 | Pas de correctif indiqué |
Autres CVE de FactoryTalk View SE
Les 6 CVE de FactoryTalk View SE →
CVE-2020-14480
Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker…
5.5
Moyenne
CVE-2020-12028
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to…
7.3
Élevée
CVE-2020-12027
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system
4.3
Moyenne
CVE-2020-12031
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a…
7.5
Élevée