CVE-2020-14481 — Rockwell Automation / FactoryTalk View SE

Description (CNA)

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / FactoryTalk View SE	affected unspecified through 9.0; affected 10.0

CWE

CWE-261

References

https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-03

CISA-ADP

No English description supplied.

No references supplied.