Description
In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCPtcp/8082, which can insecurely deserialize untrusted data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Rockwell Automation All versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform | Rockwell Automation All versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform | — |
Advisories 1
- ICSA-20-051-02 Rockwell Automation FactoryTalk Diagnostics CISA ICS & IT advisories · Feb 20, 2020