CVE-2020-25176

🗓️ 18 Mar 2022 18:00:31Reported by icscertType

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol allows remote code execution

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-25176	10 Mar 202604:00	–	circl
CNNVD	Rockwell Automation ISaGRAF 路径遍历漏洞	8 Jun 202100:00	–	cnnvd
Cvelist	CVE-2020-25176 Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal	18 Mar 202218:00	–	cvelist
EUVD	EUVD-2020-17867	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation ISaGRAF5 Runtime (Update A)	6 Oct 202000:00	–	ics
NVD	CVE-2020-25176	18 Mar 202218:15	–	nvd
OSV	CVE-2020-25176	18 Mar 202218:15	–	osv
Prion	Remote code execution	18 Mar 202218:15	–	prion
Positive Technologies	PT-2021-7842 · Rockwell Automation · Isagraf Runtime	8 Jun 202100:00	–	ptsecurity
RedhatCVE	CVE-2020-25176	5 Feb 202516:53	–	redhatcve

NVD

Vulners

Node

schneider-electric easergy_t300_firmwareRange≤2.7.1

AND

schneider-electric easergy_t300Match-

Node

schneider-electric easergy_c5_firmwareRange<1.1.0

AND

schneider-electric easergy_c5Match-

Node

schneider-electric micom_c264_firmwareRange<d6.1

AND

schneider-electric micom_c264Match-

Node

schneider-electric pacis_gtw_firmwareMatch5.1windows

schneider-electric pacis_gtw_firmwareMatch5.2windows

schneider-electric pacis_gtw_firmwareMatch6.1windows

schneider-electric pacis_gtw_firmwareMatch6.3linux

schneider-electric pacis_gtw_firmwareMatch6.3windows

AND

schneider-electric pacis_gtwMatch-

Node

schneider-electric saitel_dp_firmwareRange≤11.06.21

AND

schneider-electric saitel_dpMatch-

Node

schneider-electric epas_gtw_firmwareMatch6.4linux

schneider-electric epas_gtw_firmwareMatch6.4windows

AND

schneider-electric epas_gtwMatch-

Node

schneider-electric saitel_dr_firmwareRange≤11.06.12

AND

schneider-electric saitel_drMatch-

Node

schneider-electric scd2200_firmwareRange≤10024

AND

schneider-electric cp-3Match-

schneider-electric mc-31Match-

Node

rockwellautomation aadvance_controllerRange≤1.40

rockwellautomation isagraf_free_runtimeRange≤6.6.8isagraf6_workbench

rockwellautomation isagraf_runtimeRange5.0–6.0

Node

rockwellautomation micro810_firmwareMatch-

AND

rockwellautomation micro810Match-

Node

rockwellautomation micro820_firmwareMatch-

AND

rockwellautomation micro820Match-

Node

rockwellautomation micro830_firmwareMatch-

AND

rockwellautomation micro830Match-

Node

rockwellautomation micro850_firmwareMatch-

AND

rockwellautomation micro850Match-

Node

rockwellautomation micro870_firmwareMatch-

AND

rockwellautomation micro870Match-

Node

xylem multismart_firmwareRange<3.2.0

[
  {
    "product": "ISaGRAF Runtime",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "4.x"
      },
      {
        "status": "affected",
        "version": "5.x"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699
download	www.download.schneider-electric.com/files
xylem	www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf
cisa	www.cisa.gov/uscert/ics/advisories/icsa-20-280-01