CVE-2020-12033

Description

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.617

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-12033,CVE-2020-6967,CVE-2021-22681 are affected in Factorytalk services platform 2.3	Windows
Vulnerabilities CVE-2020-12033 are affected in Factorytalk services platform cpr9-sr6	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234