High severity · published Jul 20, 2020
CVE-2020-12029
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory
7.8
CVSS
47%
EPSS
No
On KEV
Description
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell Automation recommends applying patch 1126289. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)47.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
Factorytalk View · Rockwellautomation
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12029
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12029
Exploit
http://packetstormsecurity.com/files/160156/Rockwell-FactoryTalk-View-SE-SCADA-Unauthenticated-Remote-Code-Execution.html
Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-170-05
More from Factorytalk View
9.8
CVE-2025-9063
Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass
9.8
CVE-2024-45824
FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation
9.8
CVE-2024-4609
Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability
9.8
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed…
9.1
CVE-2025-9064
Rockwell Automation FactoryTalk View Machine Edition Path Traversal