[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd79-GSrZ32b3fPeZgM6EaUiHA6J-Ozh8fkTvtHtc70c":3,"g5a-risk:CVE-2020-12038":156},{"success":4,"data":5,"meta":154},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":28,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":69,"references":70,"referencesCount":79,"weaknesses":80,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":28,"otxData":28,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":152,"notableEvents":153},"CVE-2020-12038","What is CVE-2020-12038?","Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable. A memory corruption vulnerability exists in the algorithm that matches square brackets in the EDS subsystem. This may allow an attacker to craft specialized EDS files to crash the EDSParser COM object, leading to denial-of-service conditions.","Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RS...","2020-05-19T22:15:12.013","2021-09-23T13:34:24.913",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":31,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":27,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":28,"ObtainAllPrivilege":28,"ObtainUserPrivilege":28,"ObtainOtherPrivilege":28,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":36,"AccessComplexity":27,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":28,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","NETWORK","PARTIAL",4.3,8.6,2.9,0.02562,[41,41,41,41,41,41,41],"Medium",[45,50,53,57,60,63,66],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"rockwellautomation","eds_subsystem","*","cpe:2.3:a:rockwellautomation:eds_subsystem:*:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":48,"criteria":52,"vulnerable":4},"rslinx","cpe:2.3:a:rockwellautomation:rslinx:*:*:*:*:classic:*:*:*",{"vendor":46,"product":54,"version":55,"criteria":56,"vulnerable":4},"rslinx_enterprise","6.00.00","cpe:2.3:a:rockwellautomation:rslinx_enterprise:6.00.00:*:*:*:*:*:*:*",{"vendor":46,"product":54,"version":58,"criteria":59,"vulnerable":4},"6.10.00","cpe:2.3:a:rockwellautomation:rslinx_enterprise:6.10.00:*:*:*:*:*:*:*",{"vendor":46,"product":54,"version":61,"criteria":62,"vulnerable":4},"6.11.00","cpe:2.3:a:rockwellautomation:rslinx_enterprise:6.11.00:*:*:*:*:*:*:*",{"vendor":46,"product":64,"version":48,"criteria":65,"vulnerable":4},"rsnetworx","cpe:2.3:a:rockwellautomation:rsnetworx:*:*:*:*:*:*:*:*",{"vendor":46,"product":67,"version":48,"criteria":68,"vulnerable":4},"studio_5000_logix_designer","cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:*:*:*:*:*:*:*:*",7,[71],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.us-cert.gov\u002Fics\u002Fadvisories\u002Ficsa-20-140-01","Us-cert",[75,76,77,78],"Mitigation","Patch","Third Party Advisory","US Government Resource",1,[81,89],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":88},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","Certain languages allow direct addressing of memory locations and do not automatically ensure that these locations are valid for the memory buffer that is being referenced. This can cause read or write operations to be performed on memory locations that may be associated with other variables, data structures, or internal program data.","Stable","Class",2,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2020-12038? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-12038, a medium severity cyber security vulnerability from 2020. Products that use EDS Subsystem: Version 28.0.1 and prior...","CVE-2020-12038, CVE-2020-12038 vulnerability, CVE-2020-12038 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, rockwellautomation security, eds_subsystem vulnerability, rslinx vulnerability, rslinx_enterprise vulnerability, rsnetworx vulnerability, studio_5000_logix_designer vulnerability","\u002Fwhat-is\u002Fcve-2020-12038",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-12038","Cybersecurity","CVE-2020-12038, CVE-2020-12038 vulnerability, CVE-2020-12038 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125,133],{"Operator":28,"Negate":28,"Nodes":126},[127],{"Operator":128,"Negate":28,"CPEMatch":129},"OR",[130],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":131,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":132},"A38919F2-5EA3-4581-9034-C9D09A3CDEB3","28.0.1",{"Operator":28,"Negate":28,"Nodes":134},[135],{"Operator":128,"Negate":28,"CPEMatch":136},[137,140,142,144,146,149],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":138,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":139},"E52AA077-A130-4CBF-84C8-76E10D94C0E3","4.11.00",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":141,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"11B12B3C-8A2A-474E-8DE3-E666174800A0",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":143,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E0D6F9C0-CB2A-42FB-B3E2-4E43002C7579",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":145,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"EEEB8D1D-C0C8-4CC6-A89D-98D788571217",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":147,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":148},"CBCDDC69-A4B2-4665-88C8-6B6A337C5CDC","28.00.00",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":150,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":151},"7F9B29F9-ABAD-4E59-9298-528639F394F3","32.0",[],[],{"lastModified":11,"cacheTime":155,"version":34},1792333090938,{"score":157,"band":158,"action":159,"scoredAt":160},26,"Low","Monitor","2026-10-16T06:48:40.929717+00:00"]