CVE-2020-12038 : Security Advisory and Response

Products that use EDS Subsystem: Version 28.0.1 and prior, FactoryTalk Linx software, RSLinx Classic, RSNetWorx software, and Studio 5000 Logix Designer software are vulnerable to a memory corruption issue. An attacker could exploit this vulnerability to cause denial-of-service conditions.

Understanding CVE-2020-12038

A memory corruption vulnerability in the EDS subsystem could be exploited by an attacker to crash the EDSParser COM object, potentially leading to denial-of-service.

What is CVE-2020-12038?

Vulnerability in the algorithm matching square brackets in the EDS subsystem
Allows attackers to craft specialized EDS files to crash the EDSParser COM object

The Impact of CVE-2020-12038

Potential denial-of-service conditions due to memory corruption vulnerability

Technical Details of CVE-2020-12038

The technical details of the vulnerability are as follows:

Vulnerability Description

A memory corruption vulnerability exists in the algorithm that matches square brackets in the EDS subsystem, allowing attackers to crash the EDSParser COM object.

Affected Systems and Versions

EDS Subsystem: Version 28.0.1 and prior
FactoryTalk Linx software: Versions 6.00, 6.10, and 6.11
RSLinx Classic: Version 4.11.00 and prior
RSNetWorx software: Version 28.00.00 and prior
Studio 5000 Logix Designer software: Version 32 and prior

Exploitation Mechanism

Attackers can exploit the vulnerability by crafting specialized EDS files to trigger the crash of the EDSParser COM object.

Mitigation and Prevention

To address CVE-2020-12038, consider the following steps:

Immediate Steps to Take

Implement network segmentation to limit exposure
Apply the principle of least privilege to restrict access
Monitor network traffic for signs of malicious activity

Long-Term Security Practices

Regularly update software and firmware to patch known vulnerabilities
Conduct security assessments and penetration testing
Educate users on cybersecurity best practices

Patching and Updates

Apply patches provided by the vendor to mitigate the vulnerability