CVE-2020-14516

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-916

Affected software

VendorProductVersions
n/aRockwell Automation FactoryTalk Services Platformv6.10.00, v6.11.00

References

Timeline

Published
Mar 18, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-145179.8Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodCVE-2020-145185.3Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker.CVE-2020-145197.5This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including VCVE-2020-14528.6<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an applicationCVE-2020-145207.5The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (alCVE-2020-145219.8Multiple Mitsubishi Electric Factory Automation engineering software products have a malicious code execution vulnerability. A malicious attCVE-2020-145227.5Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled rCVE-2020-145239.8Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an attacker to execute arbitrary code.CVE-2020-145249.8Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based bCVE-2020-145253.5Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input CVE-2020-145275.9Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versioCVE-2020-145286.1Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versio
CVE-2020-14516: Critical severity, CVSS 10.0 | Vulnix