CVE-2020-12033

CVE-2020-12033

Vendor N/A
Product Rockwell Automation FactoryTalk Services Platform
Weakness CWE-20 · Input validation
Published June 23, 2020
Last update August 4, 2024

CVSS base score

What the vulnerability does

01Description

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

Key dates

02Disclosure timeline

June 23, 2020 CVE published
August 4, 2024 Record updated