CVE-2020-5807

Name of the Vulnerable Software and Affected Versions FactoryTalk Diagnostics versions prior to the fixed version

Description An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.