CVE-2020-12028 : Security Advisory and Response

This CVE-2020-12028 article provides insights into a vulnerability in Rockwell Automation's FactoryTalk View SE.

Understanding CVE-2020-12028

This CVE involves a security flaw in FactoryTalk View SE that could allow an authenticated attacker to interact with remote data without proper permissions.

What is CVE-2020-12028?

In all versions of FactoryTalk View SE, an authenticated attacker can exploit certain handlers to access data on the remote endpoint due to inadequate permission enforcement.

The Impact of CVE-2020-12028

CVSS Base Score: 7.3 (High Severity)
Attack Vector: Network
Confidentiality Impact: High
Integrity Impact: High
User Interaction: Required

Technical Details of CVE-2020-12028

This section delves into the specifics of the vulnerability.

Vulnerability Description

The flaw allows attackers to interact with remote data without proper permissions, potentially compromising confidentiality and integrity.

Affected Systems and Versions

Affected Product: FactoryTalk View SE
Vendor: Rockwell Automation
Affected Versions: All versions

Exploitation Mechanism

Attack Complexity: Low
Privileges Required: Low
Scope: Unchanged
User Interaction: Required

Mitigation and Prevention

Learn how to protect your systems from CVE-2020-12028.

Immediate Steps to Take

Enable built-in security features in FactoryTalk View SE
Follow guidance in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPS

Long-Term Security Practices

Regularly update and patch FactoryTalk View SE
Implement network segmentation and access controls
Conduct regular security assessments

Patching and Updates

Rockwell Automation has released new versions to address the vulnerabilities
If unable to update, seek additional mitigations or workarounds from the vendor's security advisory