VULNERABILITY INTELLIGENCE

CVE-2020-5802

CVSS score7.5 HIGH
EPSS probability44.70%
CISA KEVNot currently listed
Published2020-12-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.

Weakness classification

  • nvd@nist.gov: CWE-770

Primary references