Known vulnerabilities in FactoryTalk Linx

Vendor: Rockwell Automation
Software: FactoryTalk Linx
Software CPE: cpe:2.3:a:rockwell_automation:factorytalk_linx:*:*:*:*:*:*:*:*
Website: https://www.rockwellautomation.com/
Total vulnerabilities: 14
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FactoryTalk Linx FactoryTalk Linx is affected by 14 known vulnerabilities: 2 high, 10 medium, 2 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82201 - Improper input validation
CVE-2023-29464		 CWE-20 High
No
No
 - 18.10.2023 SB2023101842
#VU49159 - Improper input validation
CVE-2020-5807		 CWE-20 Medium
Available
No
 - 28.12.2020 SB2020122809
SB2020122808
#VU49158 - Uncontrolled Memory Allocation
CVE-2020-5806		 CWE-789 Low
Available
No
 - 28.12.2020 SB2020122808
#VU49157 - Uncontrolled Memory Allocation
CVE-2020-5802		 CWE-789 Medium
Available
No
 - 28.12.2020 SB2020122808
#VU49156 - Uncaught Exception
CVE-2020-5801		 CWE-248 Medium
Available
No
 - 28.12.2020 SB2020122808
#VU48648 - Out-of-bounds read
CVE-2020-27255		 CWE-125 Medium
No
No
 6.20 25.11.2020 SB2020112503
#VU48647 - Heap-based Buffer Overflow
CVE-2020-27251		 CWE-122 High
No
No
 6.20 25.11.2020 SB2020112503
#VU48646 - Improper input validation
CVE-2020-27253		 CWE-20 Medium
No
No
 6.20 25.11.2020 SB2020112503
#VU28998 - Unrestricted Upload of File with Dangerous Type
CVE-2020-12005		 CWE-434 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28997 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-12003		 CWE-22 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28996 - Improper input validation
CVE-2020-12001		 CWE-20 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28995 - Improper input validation
CVE-2020-11999		 CWE-20 Medium
No
No
 - 12.06.2020 SB2020061204
#VU28131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-12034		 CWE-89 Low
No
No
 - 20.05.2020 SB2020052025
#VU28130 - Memory corruption
CVE-2020-12038		 CWE-119 Medium
No
No
 - 20.05.2020 SB2020052025