Factorytalk View Se
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwell_automation:factorytalk_view_se:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545) |
|---|---|
| Product | Factorytalk View Se (8e27ce6d-9344-5955-afd0-715570b8b6fc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-14481 |
vulnerable | 2026-06-08 05:19:23.552485 |
Details available
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.
Published: 2022-02-24T18:27:13.935Z
Updated: 2025-04-17T18:47:56.750Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14480 |
vulnerable | 2026-06-08 05:19:23.550317 |
Details available
Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials.
Published: 2022-02-24T18:27:14.889Z
Updated: 2025-04-17T18:47:48.674Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12031 |
vulnerable | 2026-06-08 05:17:56.230085 |
Rockwell Automation FactoryTalk View SE
HIGH (7.5)
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.
Published: 2020-07-20T15:10:06.923Z
Updated: 2024-09-16T16:48:08.622Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12029 |
vulnerable | 2026-06-08 05:17:56.220255 |
Rockwell Automation FactoryTalk View SE
CRITICAL (9)
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell Automation recommends applying patch 1126289. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.
Published: 2020-07-20T14:56:42.195Z
Updated: 2024-09-16T22:02:56.282Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12028 |
vulnerable | 2026-06-08 05:17:56.219804 |
Rockwell Automation FactoryTalk View SE
HIGH (7.3)
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs.
Published: 2020-07-20T15:17:11.738Z
Updated: 2024-09-16T23:26:08.043Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12027 |
vulnerable | 2026-06-08 05:17:56.218376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.