PT-2020-18724
CVE-2020-5807
·
تاريخ النشر
2020-12-29
·
تاريخ التحديث
2020-12-30
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
FactoryTalk Diagnostics versions prior to the fixed version
Description
An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in
wcscpy s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾