CVE-2020-5802

7.5 highEPSS 45%

High (7.5) in rockwellautomation factorytalk linx. EPSS 45% chance of exploitation in the next 30 days.

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 45% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2020-12-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rockwellautomation:factorytalk_linx

References

https://www.tenable.com/security/research/tra-2020-71
https://www.tenable.com/security/research/tra-2020-71

Check your stack JSON