SB2020052025 - Multiple vulnerabilities in Rockwell Automation EDS Subsystem

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2020-12038)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in the algorithm that matches square brackets in the EDS subsystem. A remote authenticated attacker can create a specially crafted EDS file, trick the victim into opening it, trigger memory corruption and cause a denial of service condition on the target system.

2) SQL injection (CVE-ID: CVE-2020-12034)

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker on the local network can send a specially crafted EDS file to the affected application and manipulate the database storing the EDS files, leading to denial-of-service conditions.

Remediation

Install update from vendor's website.

References

• https://www.us-cert.gov/ics/advisories/icsa-20-140-01