CVE-2020-12029 is a critical vulnerability affecting all versions of Rockwell Automation FactoryTalk View SE, stemming from improper validation of filenames within project directories. A remote, unauthenticated attacker can exploit this by executing a crafted file, potentially leading to remote code execution (RCE) with high impact on confidentiality, integrity, and availability. While not listed on the KEV catalog, a Metasploit module exists, indicating readily available exploit code, despite a lack of broader community discussion or media coverage. Rockwell Automation recommends applying patch 1126289, preceded by the patch rollup dated April 6, 2020, or later.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:rockwellautomation:factorytalk_view:-:*:*:*:se:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.