CVE-2015-1010

2015-05-3117:00:00

icscert

www.cve.org

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.6%

JSON

Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack.

References

ics-cert.us-cert.gov/advisories/ICSA-15-132-02

rockwellautomation.custhelp.com/app/answers/detail/a_id/700915