Paper/Archive/CVE-2020-14516

CVE-2020-14516

icscert — In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-2…

EPSS 4%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (NVD)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 91.0.910 × 2018.2 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.

Affected

ProductAffectedFixed inSource

Rockwell Automation FactoryTalk Services Platformv6.10.00, v6.11.00–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-21-054-01