QwikSec

Security Database

CVE

CWE

Training

CVE-2020-12033

Published: Jun 23, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

Vendor	Product	Versions
n/a	Rockwell Automation FactoryTalk Services Platform	affected `All Versions`

Weaknesses (CWE)

References

https://www.us-cert.gov/ics/advisories/icsa-20-170-04

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.