CVE-2020-14481

Description

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the users operating system and certain components of FactoryTalk View SE.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.015

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-14480,CVE-2020-14481 are affected in FactoryTalk View Site Edition 10.0	Windows
Vulnerabilities CVE-2020-14480,CVE-2020-14481 are affected in FactoryTalk View Site Edition 9.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234