Eds Subsystem

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-12034 HIGH PATCH This Week

Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior,. Rated high severity (CVSS 8.2), this vulnerability is no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

SQLi Eds Subsystem Rslinx Rslinx Enterprise Rsnetworx +1

NVD

CVSS 3.1

8.2

EPSS

1.3%

CVE-2020-12038 MEDIUM PATCH This Month

Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior,. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Eds Subsystem Rslinx Rslinx Enterprise Rsnetworx +1

NVD

CVSS 3.1

5.5

EPSS

2.5%

CVE-2020-12034

EPSS 1% CVSS 8.2

HIGH PATCH This Week

SQLi Eds Subsystem Rslinx +3

NVD

CVE-2020-12038

EPSS 3% CVSS 5.5

MEDIUM PATCH This Month

Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior,. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Eds Subsystem Rslinx +3

NVD