[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftVD6G7deh-ii5xxOcMEwYu8bADGj84uGJ4G1jWmTZqg":3,"g5a-risk:CVE-2020-12028":139},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":26,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":57,"references":58,"referencesCount":76,"weaknesses":77,"weaknessesCount":57,"isActivelyExploited":86,"cisaInfo":26,"otxData":26,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":121,"notableEvents":122},"CVE-2020-12028","What is CVE-2020-12028?","In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and\u002For HTTPs.","In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote end...","2020-07-20T16:15:12.163","2022-04-25T17:39:28.52",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.2,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"ics-cert@hq.dhs.gov","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":34,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N","REQUIRED",7.3,2.1,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":45,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",5.5,"MEDIUM",8,4.9,0.53033,[48,48,48,48,48,48,48],"High",[52],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"rockwellautomation","factorytalk_view","*","cpe:2.3:a:rockwellautomation:factorytalk_view:*:*:*:*:se:*:*:*",1,[59,66,71],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F160156\u002FRockwell-FactoryTalk-View-SE-SCADA-Unauthenticated-Remote-Code-Execution.html","Packetstormsecurity",[63,64,65],"Exploit","Third Party Advisory","VDB Entry",{"url":67,"source":68,"tags":69},"https:\u002F\u002Frockwellautomation.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F1126944","Custhelp",[70],"Vendor Advisory",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fus-cert.cisa.gov\u002Fics\u002Fadvisories\u002Ficsa-20-170-05","CISA",[64,75],"US Government Resource",3,[78],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2020-12028? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-12028, a high severity cyber security vulnerability from 2020. High exploit probability (53.0%). In all versions of Factor...","CVE-2020-12028, CVE-2020-12028 vulnerability, CVE-2020-12028 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, rockwellautomation security, factorytalk_view vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2020-12028",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-12028","Cybersecurity","CVE-2020-12028, CVE-2020-12028 vulnerability, CVE-2020-12028 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":26,"Negate":26,"Nodes":115},[116],{"Operator":117,"Negate":26,"CPEMatch":118},"OR",[119],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4DDF668E-9D30-4588-8897-474014D746A5",[],[123,130],{"id":124,"eventType":125,"eventTime":126,"details":127,"label":128,"color":129},"e971d9c1-239e-439a-9603-f3f3bb670758","LOW_EPSS_DELTA","2025-04-29T01:15:30.052247+00:00","Daily EPSS score decreased by 0.137 on 2023-12-30","EPSS Score Decreased","green",{"id":131,"eventType":132,"eventTime":133,"details":134,"label":135,"color":136},"8acb9c96-3229-4721-ab48-166af4d7c49b","HIGH_EPSS_DELTA","2025-11-22T04:06:12.581386+00:00","Daily EPSS score increased by 0.113 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":138,"version":40},1792329685596,{"score":140,"band":141,"action":142,"scoredAt":143},59,"Medium","Plan remediation","2026-10-16T06:49:03.318169+00:00"]