High severity · published Jul 20, 2020
CVE-2020-12028
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those…
8.1
CVSS
53%
EPSS
No
On KEV
Description
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)53.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
Factorytalk View · Rockwellautomation
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12028
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12028
Exploit
http://packetstormsecurity.com/files/160156/Rockwell-FactoryTalk-View-SE-SCADA-Unauthenticated-Remote-Code-Execution.html
Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05
More from Factorytalk View
9.8
CVE-2025-9063
Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass
9.8
CVE-2024-45824
CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products
9.8
CVE-2024-4609
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has…
9.8
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed…
9.1
CVE-2025-9064
Rockwell Automation FactoryTalk View Machine Edition Path Traversal
