Skip to content
OpenAdvisories
High ICSA-20-177-02 1 CVE

Rockwell Automation FactoryTalk Services Platform XXE

Published Jun 25, 2020 · Updated Jun 25, 2020

Vendor: Rockwell Automation Product: FactoryTalk® Services Platform

Summary

Successful exploitation of this vulnerability could lead to a denial-of-service condition and to the arbitrary reading of any local file via system level services.

Vulnerabilities 1

  • High 7.1
    CVE-2020-14478

    IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611

    A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitr…

    Rockwell Automation FactoryTalk® Services Platform ICS / OT

Revision history

  1. #1

    ICSA-20-177-02 Rockwell Automation FactoryTalk Services Platform XXE

References