Critical ICSA-20-329-01 3 CVEs

Rockwell Automation FactoryTalk Linx

Published Nov 24, 2020 · Updated Nov 24, 2020

Vendor: Rockwell Automation Product: FactoryTalk Linx

Summary

Successful exploitation of these vulnerabilities could allow a denial-of-service condition, remote code execution, or leak information that could be used to bypass address space layout randomization (ASLR).

Vulnerabilities 3

Unscored —

CVE-2020-27251

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a r…

Nov 26, 2020
Unscored —

CVE-2020-27253

A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could…

Nov 26, 2020
Unscored —

CVE-2020-27255

A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a r…

Nov 26, 2020

Revision history

2020-11-24 #1
ICSA-20-329-01 Rockwell Automation FactoryTalk Linx

References

ICS Advisory ICSA-20-329-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-329-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B