CVE-2020-14516

Published: Mar 18, 2021Modified: Jun 17, 2026

10.0

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: NVD

Description

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.

Affected (2)

Products: Rockwellautomation: Factorytalk Services Platform

Rockwellautomation

1 product

Factorytalk Services Platform

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Rockwellautomation Factorytalk Services Platform	Version 6.10.00
Rockwellautomation Factorytalk Services Platform	Version 6.11.00

Related CWEs

Use of Password Hash With Insufficient Computational Effort

The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

References (2)

https://us-cert.cisa.gov/ics/advisories/icsa-21-054-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsa-21-054-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.