CVE-2020-25182

🗓️ 18 Mar 2022 18:00:30Reported by icscertType

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x uncontrolled loading of dynamic libraries vulnerability

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-25182	18 Mar 202221:33	–	circl
CNNVD	ISaGRAF 代码问题漏洞	8 Jun 202100:00	–	cnnvd
Cvelist	CVE-2020-25182 Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element	18 Mar 202218:00	–	cvelist
EUVD	EUVD-2020-17873	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation ISaGRAF5 Runtime (Update A)	6 Oct 202000:00	–	ics
NVD	CVE-2020-25182	18 Mar 202218:15	–	nvd
Prion	Code injection	18 Mar 202218:15	–	prion
Positive Technologies	PT-2021-7832 · Microsoft +1 · Windows +1	8 Jun 202100:00	–	ptsecurity
RedhatCVE	CVE-2020-25182	22 May 202516:33	–	redhatcve
Tenable Nessus	Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element (CVE-2020-25182)	28 Apr 202200:00	–	nessus

NVD

Vulners

Node

schneider-electric easergy_t300_firmwareRange≤2.7.1

AND

schneider-electric easergy_t300Match-

Node

schneider-electric easergy_c5_firmwareRange<1.1.0

AND

schneider-electric easergy_c5Match-

Node

schneider-electric micom_c264_firmwareRange<d6.1

AND

schneider-electric micom_c264Match-

Node

schneider-electric pacis_gtw_firmwareMatch5.1windows

schneider-electric pacis_gtw_firmwareMatch5.2windows

schneider-electric pacis_gtw_firmwareMatch6.1windows

schneider-electric pacis_gtw_firmwareMatch6.3linux

schneider-electric pacis_gtw_firmwareMatch6.3windows

AND

schneider-electric pacis_gtwMatch-

Node

schneider-electric saitel_dp_firmwareRange≤11.06.21

AND

schneider-electric saitel_dpMatch-

Node

schneider-electric epas_gtw_firmwareMatch6.4linux

schneider-electric epas_gtw_firmwareMatch6.4windows

AND

schneider-electric epas_gtwMatch-

Node

schneider-electric saitel_dr_firmwareRange≤11.06.12

AND

schneider-electric saitel_drMatch-

Node

schneider-electric scd2200_firmwareRange≤10024

AND

schneider-electric cp-3Match-

schneider-electric mc-31Match-

Node

rockwellautomation aadvance_controllerRange≤1.40

rockwellautomation isagraf_free_runtimeRange≤6.6.8isagraf6_workbench

Node

rockwellautomation micro810_firmwareMatch-

AND

rockwellautomation micro810Match-

Node

rockwellautomation micro820_firmwareMatch-

AND

rockwellautomation micro820Match-

Node

rockwellautomation micro830_firmwareMatch-

AND

rockwellautomation micro830Match-

Node

rockwellautomation micro850_firmwareMatch-

AND

rockwellautomation micro850Match-

Node

rockwellautomation micro870_firmwareMatch-

AND

rockwellautomation micro870Match-

Node

xylem multismart_firmwareRange<3.2.0

Node

rockwellautomation isagraf_runtimeRange5.0–6.0windows

[
  {
    "product": "ISaGRAF Runtime",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "4.x"
      },
      {
        "status": "affected",
        "version": "5.x"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699
download	www.download.schneider-electric.com/files
xylem	www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf
cisa	www.cisa.gov/uscert/ics/advisories/icsa-20-280-01

21 Nov 2024 05:17Current

7.2High risk

Vulners AI Score7.2

CVSS 24.6

CVSS 3.16.7

EPSS0.00015

SSVC

CWE-427