CVE-2020-6967

CVE-2020-6967

Vendor N/A
Product Rockwell Automation All versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform
Weakness CWE-502 · Unsafe deserialization
Published March 23, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCPtcp/8082, which can insecurely deserialize untrusted data.

Key dates

02Disclosure timeline

March 23, 2020 CVE published
August 4, 2024 Record updated