Vulnerability Description
An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy_s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Factorytalk Diagnostics | <= 6.11 |
Related Weaknesses (CWE)
References
- https://www.tenable.com/security/research/tra-2020-71Third Party Advisory
- https://www.tenable.com/security/research/tra-2020-71Third Party Advisory
FAQ
What is CVE-2020-5807?
CVE-2020-5807 is a vulnerability with a CVSS score of 7.5 (HIGH). An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log ent...
How severe is CVE-2020-5807?
CVE-2020-5807 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-5807?
Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Factorytalk Diagnostics.