High ICSA-20-140-01 2 CVEs

Rockwell Automation EDS Subsystem

Published May 19, 2020 · Updated May 19, 2020

Vendor: Rockwell Automation Product: FactoryTalk Linx software (Previously called RSLinx Enterprise) Product: RSLinx Classic® Product: RSNetWorx software Product: Studio 5000 Logix Designer software

Summary

Successful exploitation of these vulnerabilities could lead to a denial-of-service condition.

Vulnerabilities 2

Unscored —

CVE-2020-12034

Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterpri…

May 20, 2020
Unscored —

CVE-2020-12038

Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterpri…

May 19, 2020

Revision history

2020-05-19 #1
ICSA-20-140-01 Rockwell Automation EDS Subsystem

References

ICS Advisory ICSA-20-140-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-140-01
Recommended Practices
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/54102
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B