CVE-2020-12005

Vulnerability

CVE-2020-12005 is an improper input validation vulnerability in the communication function of Rockwell Automation FactoryTalk Linx versions 6.00, 6.10, and 6.11, as well as in products that utilize it: Connected Components Workbench version 12 and prior, ControlFLASH version 14 and later, ControlFLASH Plus version 1 and later, FactoryTalk Asset Centre version 9 and later, FactoryTalk Linx CommDTM version 1 and later, Studio 5000 Launcher version 31 and later, and Studio 5000 Logix Designer software version 32 and prior [1]. The vulnerability allows users to upload EDS files without proper sanitization, enabling an attacker to provide a file with bad compression that consumes all available CPU resources [1].

Exploitation

An attacker with low privileges and network access can exploit this vulnerability remotely with low skill level [1]. The attacker uploads a specially crafted EDS file containing malformed compression data to the affected system. No user interaction is required [1].

Impact

Successful exploitation leads to a denial-of-service condition by exhausting CPU resources, making the system unavailable [1]. This vulnerability does not enable code execution or data compromise; however, other vulnerabilities in the same advisory (CVE-2020-11999, CVE-2020-12001) can lead to remote code execution and information disclosure [1].

Mitigation

Rockwell Automation has released updates to address this vulnerability. Users should upgrade FactoryTalk Linx to the latest version and apply vendor patches for all affected products [1]. RSLinx Classic v4.11.00 and prior were removed from the scope of this advisory in Update A [1]. No workarounds are documented; updating is the recommended mitigation.