CVE-2020-25184

🗓️ 18 Mar 2022 18:00:32Reported by icscertType

Rockwell ISaGRAF Runtime Versions 4.x and 5.x stores plaintext password

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the application development environment for ISaGRAF programmable logic controllers allows attackers to access password information stored in an unencrypted form, thereby enabling them to compromise the protected data.	4 Jul 202300:00	–	bdu_fstec
Circl	CVE-2020-25184	10 Mar 202604:00	–	circl
CNNVD	Rockwell Automation ISaGRAF 安全漏洞	8 Jun 202100:00	–	cnnvd
Cvelist	CVE-2020-25184 Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials	18 Mar 202218:00	–	cvelist
EUVD	EUVD-2020-17875	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation ISaGRAF5 Runtime (Update A)	6 Oct 202000:00	–	ics
NVD	CVE-2020-25184	18 Mar 202218:15	–	nvd
OSV	CVE-2020-25184	18 Mar 202218:15	–	osv
Prion	Information disclosure	18 Mar 202218:15	–	prion
Positive Technologies	PT-2021-7837 · Rockwell Automation · Isagraf Runtime	8 Jun 202100:00	–	ptsecurity

NVD

Vulners

Node

schneider-electric easergy_t300_firmwareRange≤2.7.1

AND

schneider-electric easergy_t300Match-

Node

schneider-electric easergy_c5_firmwareRange<1.1.0

AND

schneider-electric easergy_c5Match-

Node

schneider-electric micom_c264_firmwareRange<d6.1

AND

schneider-electric micom_c264Match-

Node

schneider-electric pacis_gtw_firmwareMatch5.1windows

schneider-electric pacis_gtw_firmwareMatch5.2windows

schneider-electric pacis_gtw_firmwareMatch6.1windows

schneider-electric pacis_gtw_firmwareMatch6.3linux

schneider-electric pacis_gtw_firmwareMatch6.3windows

AND

schneider-electric pacis_gtwMatch-

Node

schneider-electric saitel_dp_firmwareRange≤11.06.21

AND

schneider-electric saitel_dpMatch-

Node

schneider-electric epas_gtw_firmwareMatch6.4linux

schneider-electric epas_gtw_firmwareMatch6.4windows

AND

schneider-electric epas_gtwMatch-

Node

schneider-electric saitel_dr_firmwareRange≤11.06.12

AND

schneider-electric saitel_drMatch-

Node

schneider-electric scd2200_firmwareRange≤10024

AND

schneider-electric cp-3Match-

schneider-electric mc-31Match-

Node

rockwellautomation aadvance_controllerRange≤1.40

rockwellautomation isagraf_free_runtimeRange≤6.6.8isagraf6_workbench

rockwellautomation isagraf_runtimeRange5.0–6.0

Node

rockwellautomation micro810_firmwareMatch-

AND

rockwellautomation micro810Match-

Node

rockwellautomation micro820_firmwareMatch-

AND

rockwellautomation micro820Match-

Node

rockwellautomation micro830_firmwareMatch-

AND

rockwellautomation micro830Match-

Node

rockwellautomation micro850_firmwareMatch-

AND

rockwellautomation micro850Match-

Node

rockwellautomation micro870_firmwareMatch-

AND

rockwellautomation micro870Match-

Node

xylem multismart_firmwareRange<3.2.0

[
  {
    "product": "ISaGRAF Runtime",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "4.x"
      },
      {
        "status": "affected",
        "version": "5.x"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699
download	www.download.schneider-electric.com/files
xylem	www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf
cisa	www.cisa.gov/uscert/ics/advisories/icsa-20-280-01

21 Nov 2024 05:17Current

6.3Medium risk

Vulners AI Score6.3

CVSS 22.1

CVSS 3.15.5 - 7.8

EPSS0.00028

SSVC