CVE-2020-25184
—CVSS 3.1
5.5 medium
EPSS
<1%p37
Published
()
Modified
Description
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the file and saves the data in a variable without any additional modification. A local, unauthenticated attacker could compromise the user passwords, resulting in information disclosure.
- Vendors
- schneider-electricrockwellautomationxylem
- Products
- easergy t300 firmware, easergy c5 firmware, micom c264 firmware, pacis gtw firmware, saitel dp firmware, epas gtw firmware, saitel dr firmware, scd2200 firmware, aadvance controller, isagraf free runtime, isagraf runtime, micro810 firmware
- Weakness
- CWE-256, CWE-522
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.