CVE-2020-14516

10.0 criticalEPSS 4.2%

Critical (10.0) in rockwellautomation factorytalk services platform. EPSS 4.2% chance of exploitation in the next 30 days.

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-916
Published: 2021-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rockwellautomation:factorytalk_services_platform

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-054-01
https://us-cert.cisa.gov/ics/advisories/icsa-21-054-01

Check your stack JSON