CVE-2020-25176

🗓️ 18 Mar 2022 18:00:31Reported by icscertType

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol allows remote code execution

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	ISaGRAF Runtime Code Execution	6 Jul 202300:00	–	bdu_fstec
Circl	CVE-2020-25176	10 Mar 202604:00	–	circl
CNNVD	Rockwell Automation ISaGRAF path traversal vulnerability	8 Jun 202100:00	–	cnnvd
Cvelist	CVE-2020-25176 Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal	18 Mar 202218:00	–	cvelist
EUVD	EUVD-2020-17867	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation ISaGRAF5 Runtime (Update A)	6 Oct 202000:00	–	ics
NVD	CVE-2020-25176	18 Mar 202218:15	–	nvd
osv_cve	CVE-2020-25176	18 Mar 202218:15	–	osv_cve
Prion	Remote code execution	18 Mar 202218:15	–	prion
Positive Technologies	PT-2021-7842 · Rockwell Automation · Isagraf Runtime	8 Jun 202100:00	–	ptsecurity

NVD

Vulners

Node

AND

schneider-electric easergy_t300_firmwareRange≤2.7.1

schneider-electric easergy_t300Match-

Node

AND

schneider-electric easergy_c5_firmwareRange<1.1.0

schneider-electric easergy_c5Match-

Node

AND

schneider-electric micom_c264_firmwareRange<d6.1

schneider-electric micom_c264Match-

Node

AND

schneider-electric pacis_gtw_firmwareMatch5.1windows

schneider-electric pacis_gtw_firmwareMatch5.2windows

schneider-electric pacis_gtw_firmwareMatch6.1windows

schneider-electric pacis_gtw_firmwareMatch6.3linux

schneider-electric pacis_gtw_firmwareMatch6.3windows

schneider-electric pacis_gtwMatch-

Node

AND

schneider-electric saitel_dp_firmwareRange≤11.06.21

schneider-electric saitel_dpMatch-

Node

AND

schneider-electric epas_gtw_firmwareMatch6.4linux

schneider-electric epas_gtw_firmwareMatch6.4windows

schneider-electric epas_gtwMatch-

Node

AND

schneider-electric saitel_dr_firmwareRange≤11.06.12

schneider-electric saitel_drMatch-

Node

AND

schneider-electric scd2200_firmwareRange≤10024

schneider-electric cp-3Match-

schneider-electric mc-31Match-

Node

rockwellautomation aadvance_controllerRange≤1.40

rockwellautomation isagraf_free_runtimeRange≤6.6.8isagraf6_workbench

rockwellautomation isagraf_runtimeRange5.0–6.0

Node

AND

rockwellautomation micro810_firmwareMatch-

rockwellautomation micro810Match-

Node

AND

rockwellautomation micro820_firmwareMatch-

rockwellautomation micro820Match-

Node

AND

rockwellautomation micro830_firmwareMatch-

rockwellautomation micro830Match-

Node

AND

rockwellautomation micro850_firmwareMatch-

rockwellautomation micro850Match-

Node

AND

rockwellautomation micro870_firmwareMatch-

rockwellautomation micro870Match-

Node

xylem multismart_firmwareRange<3.2.0

[
  {
    "product": "ISaGRAF Runtime",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "4.x"
      },
      {
        "status": "affected",
        "version": "5.x"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699
cisa	www.cisa.gov/uscert/ics/advisories/icsa-20-280-01
xylem	www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf

17 Jun 2026 03:06Current

9.9Critical risk

Vulners AI Score9.9

CVSS 29.3

CVSS 3.19.1 - 9.8

EPSS0.06421

SSVC