CVE-2020-5802

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected.

• CWE-770

• https://www.tenable.com/security/research/tra-2020-71Third Party Advisory
• https://www.tenable.com/security/research/tra-2020-71Third Party Advisory

Published

Dec 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5796Improper preservation of permissions in Nagios XI 5.7.4 allo…7.8
• CVE-2020-5797UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(…6.1
• CVE-2020-5798inSync Client installer for macOS versions v6.8.0 and prior …7.8
• CVE-2020-5799The Eat Spray Love mobile app for both iOS and Android conta…9.8
• CVE-2020-5800The Eat Spray Love mobile app for both iOS and Android conta…9.8
• CVE-2020-5801An attacker can craft and send an OpenNamespace message to p…7.5
• CVE-2020-5803Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.…8.1
• CVE-2020-5804Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a pa…8.1
• CVE-2020-5805In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are…8.8
• CVE-2020-5806An attacker-controlled memory allocation size can be passed …5.5
• CVE-2020-5807An unauthenticated remote attacker can send data to RsvcHost…7.5
• CVE-2020-5808In certain scenarios in Tenable.sc prior to 5.17.0, a scanne…7.5