CoreCVE
Back

HIGH

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords

Published Feb 24, 2022

Description

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-261

CWE-326

Inadequate Encryption Strength

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner icscert
Published Feb 24, 2022
Updated Apr 17, 2025
Reserved Jun 19, 2020
Link CVE-2020-14481

CISA Vulnrichment

Updated Apr 17, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-14481

Red Hat

No data

ENISA EUVD

Assigner icscert
Published Feb 24, 2022
Updated Apr 17, 2025
Link EUVD-2020-6617

GitHub

No data