CVE-2020-11999

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. An exposed API call allows users to provide files to be processed without sanitation. This may allow an attacker to specify a filename to execute unauthorized code and modify files or data.

• CWE-20
• CWE-20

• https://www.us-cert.gov/ics/advisories/icsa-20-163-02Third Party Advisory, US Government Resource
• https://www.us-cert.gov/ics/advisories/icsa-20-163-02Third Party Advisory, US Government Resource

Published

Jun 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11993Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debu…7.5
• CVE-2020-11994Server-Side Template Injection and arbitrary file disclosure…7.5
• CVE-2020-11995A deserialization vulnerability existed in dubbo 2.7.5 and i…9.8
• CVE-2020-11996A specially crafted sequence of HTTP/2 requests sent to Apac…7.5
• CVE-2020-11997Apache Guacamole 1.2.0 and earlier do not consistently restr…4.3
• CVE-2020-11998A regression has been introduced in the commit preventing JM…9.8
• CVE-2020-1200<p>A remote code execution vulnerability exists in Microsoft…8.6
• CVE-2020-12000The affected product is vulnerable to the handling of serial…7.5
• CVE-2020-12001FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Class…9.8
• CVE-2020-12002Advantech WebAccess Node, Version 8.4.4 and prior, Version 9…9.8
• CVE-2020-12003FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Class…7.5
• CVE-2020-12004The affected product lacks proper authentication required to…7.5