Beveiligingsadvies

CVE-2020-5802

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-29 15:04:26
Laatst bijgewerkt 2024-08-04 08:39:25
Toegewezen door tenable
CVSS-score geen score
Status PUBLISHED

Beschrijving

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.