Login Request a demo
High severity · published Jul 20, 2020
CVE-2020-12031
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated…
7.8
CVSS
0.6%
EPSS
No
On KEV
Description
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
Factorytalk View · Rockwellautomation
All versions, or not specified · source: NVD
Affected product
FV
Factorytalk View
Rockwellautomation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12031
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12031
Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05
More from Factorytalk View
9.8
CVE-2025-9063
An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control
9.8
CVE-2024-45824
CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products
9.8
CVE-2024-4609
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has…
9.8
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed…
9.1
CVE-2025-9064
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the…