VULNERABILITY INTELLIGENCE

CVE-2020-12033

CVSS score8.8 HIGH
EPSS probability1.10%
CISA KEVNot currently listed
Published2020-06-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-20
  • nvd@nist.gov: CWE-20

Primary references