High severity · published Feb 24, 2022
CVE-2020-14481
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
Factorytalk View · Rockwellautomation
through 9.0; 10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14481
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14481
Mitigation
https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-03
More from Factorytalk View
9.8
CVE-2025-9063
Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass
9.8
CVE-2024-45824
FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation
9.8
CVE-2024-4609
Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability
9.8
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed…
9.1
CVE-2025-9064
Rockwell Automation FactoryTalk View Machine Edition Path Traversal