Known vulnerabilities in Rockwell Automation FactoryTalk View SE
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2020-14480 | Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker… | 5.5 Medium | Feb 24, 2022 |
| CVE-2020-14481 | The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local,… | 7.8 High | Feb 24, 2022 |
| CVE-2020-12028 | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to… | 7.3 High | Jul 20, 2020 |
| CVE-2020-12027 | All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system | 4.3 Medium | Jul 20, 2020 |
| CVE-2020-12031 | In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a… | 7.5 High | Jul 20, 2020 |
| CVE-2020-12029 | All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory | 9.0 Critical | Jul 20, 2020 |
Other Rockwell Automation products
Arena® 21
ArmorStart® LT 11
Arena Simulation 11
ArmorStart ST 10
FactoryTalk AssetCentre 9
1794-AENTR FLEX I/O EtherNet/IP adapter 8
ControlLogix, CompactLogix, GuardLogix, and SoftLogix 8
ControlLogix and GuardLogix controllers 8
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 8
1788-ENBT FLEXLogix adapter 8
CompactLogix and SoftLogix controllers 8
CompactLogix L32E and L35E controllers 8