Rockwellautomation Rslinx Classic vulnerabilities

6 CVEs affecting Rockwellautomation Rslinx Classic, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12005, published 2020-06-15.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-12001, published 2020-06-15. Critical severity, CVSS 9.8. EPSS: 11.5% chance of exploitation in the next 30 days. FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version…
• CVE-2020-12003, published 2020-06-15. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version…
• CVE-2020-11999, published 2020-06-15. High severity, CVSS 8.1. EPSS: 2.8% chance of exploitation in the next 30 days. FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version…
• CVE-2018-10619, published 2018-06-07. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to…
• CVE-2020-12005, published 2020-06-15. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version…
• CVE-2020-10642, published 2020-04-13. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system…