Weak Encryption Vulnerability in FactoryTalk View SE DeskLock Tool

CVE-2020-14481

Summary

The DeskLock tool in FactoryTalk View SE is susceptible to a vulnerability due to the use of a weak encryption algorithm. This flaw allows a local, authenticated attacker to potentially decipher sensitive user credentials, which may include Windows user and DeskLock passwords. In instances where the compromised account contains administrative privileges, attackers could exploit this vulnerability to gain comprehensive access to the affected operating system and certain components of FactoryTalk View SE, posing significant security risks.

References