Critical ICSA-20-163-02 3 CVEs

Rockwell Automation FactoryTalk Linx Software (Update A)

Published Jun 11, 2020 · Updated Jul 9, 2020 · Revision 2

Vendor: Rockwell Automation Product: Connected Components Workbench Product: ControlFLASH ® Product: ControlFLASH Plus Product: FactoryTalk Asset Centre Product: FactoryTalk Linx Product: FactoryTalk Linx CommDTM Product: RSLinx Classic® Product: Studio 5000 Launcher Product: Studio 5000 Logix Designer software

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, obtain remote code execution, and read sensitive information.

Vulnerabilities 3

Unscored —

CVE-2020-11999

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Versi…

Jun 15, 2020
Unscored —

CVE-2020-12003

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Versi…

Jun 15, 2020
Unscored —

CVE-2020-12005

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Versi…

Jun 15, 2020

Revision history

2020-07-09 #2
ICSA-20-163-02 Rockwell Automation FactoryTalk Linx Software (Update A)
2020-06-11 #1
ICSA-20-163-02 Rockwell Automation FactoryTalk Linx Software

References

ICS Advisory ICSA-20-163-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-163-02
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B