Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-25180

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm (TEA) on an entered or saved password. A remote, unauthenticated attacker could pass their own encrypted password to the ISaGRAF 5 Runtime, which may result in information disclosure on the device.

Published

2022-03-18T18:15:09.187

Last Modified

2024-11-21T05:17:34.417

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-321
  • Type: Primary
    CWE-798
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric easergy_t300_firmware ≤ 2.7.1 Yes
Hardware schneider-electric easergy_t300 - No
Operating System schneider-electric easergy_c5_firmware < 1.1.0 Yes
Hardware schneider-electric easergy_c5 - No
Operating System schneider-electric micom_c264_firmware < d6.1 Yes
Hardware schneider-electric micom_c264 - No
Operating System schneider-electric pacis_gtw_firmware 5.1 Yes
Operating System schneider-electric pacis_gtw_firmware 5.2 Yes
Operating System schneider-electric pacis_gtw_firmware 6.1 Yes
Operating System schneider-electric pacis_gtw_firmware 6.3 Yes
Operating System schneider-electric pacis_gtw_firmware 6.3 Yes
Hardware schneider-electric pacis_gtw - No
Operating System schneider-electric saitel_dp_firmware ≤ 11.06.21 Yes
Hardware schneider-electric saitel_dp - No
Operating System schneider-electric epas_gtw_firmware 6.4 Yes
Operating System schneider-electric epas_gtw_firmware 6.4 Yes
Hardware schneider-electric epas_gtw - No
Operating System schneider-electric saitel_dr_firmware ≤ 11.06.12 Yes
Hardware schneider-electric saitel_dr - No
Operating System schneider-electric scd2200_firmware ≤ 10024 Yes
Hardware schneider-electric cp-3 - No
Hardware schneider-electric mc-31 - No
Application rockwellautomation aadvance_controller ≤ 1.40 Yes
Application rockwellautomation isagraf_free_runtime ≤ 6.6.8 Yes
Application rockwellautomation isagraf_runtime < 6.0 Yes
Operating System rockwellautomation micro810_firmware - Yes
Hardware rockwellautomation micro810 - No
Operating System rockwellautomation micro820_firmware - Yes
Hardware rockwellautomation micro820 - No
Operating System rockwellautomation micro830_firmware - Yes
Hardware rockwellautomation micro830 - No
Operating System rockwellautomation micro850_firmware - Yes
Hardware rockwellautomation micro850 - No
Operating System rockwellautomation micro870_firmware - Yes
Hardware rockwellautomation micro870 - No
Operating System xylem multismart_firmware < 3.2.0 Yes
References