CVE-2020-12033

8.8 highEPSS 1.1%

High (8.8) in rockwellautomation factorytalk services platform. EPSS 1.1% chance of exploitation in the next 30 days.

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2020-06-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rockwellautomation:factorytalk_services_platform

References

https://www.us-cert.gov/ics/advisories/icsa-20-170-04
https://www.us-cert.gov/ics/advisories/icsa-20-170-04

Check your stack JSON