Rockwell Automation ISaGRAF5 Runtime (Update A)
Successful exploitation of these vulnerabilities may result in remote code execution, information disclosure, or a denial-of-service condition.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25184US | medium5.5 | — | ||
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the… | ||||
| CVE-2020-25182US | medium6.7 | — | ||
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenti… | ||||
| CVE-2020-25180US | medium6.5OT elevated | — | ||
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed… | ||||
| CVE-2020-25178US | high8.8OT elevated | — | ||
ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. This communication protocol provides various file system operations, as w… | ||||
| CVE-2020-25176US | critical9.8 | — | ||
Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file system. Since the param… | ||||
references
External citations — patches, advisories, analysis.
remediations (25)
- MitigationAADvance Controller
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationAADvance Controller
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationAADvance Controller
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationAADvance Controller
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationAADvance Controller
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationGE Steam Power's ALSPA S6 MFC3000 and MFC1000
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationGE Steam Power's ALSPA S6 MFC3000 and MFC1000
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationGE Steam Power's ALSPA S6 MFC3000 and MFC1000
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationGE Steam Power's ALSPA S6 MFC3000 and MFC1000
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationGE Steam Power's ALSPA S6 MFC3000 and MFC1000
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationISaGRAF Free Runtime in ISaGRAF6 Workbench
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationISaGRAF Free Runtime in ISaGRAF6 Workbench
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationISaGRAF Free Runtime in ISaGRAF6 Workbench
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationISaGRAF Free Runtime in ISaGRAF6 Workbench
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationISaGRAF Free Runtime in ISaGRAF6 Workbench
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMicro800 family
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMicro800 family
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMicro800 family
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMicro800 family
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMicro800 family
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMultiSmart Gen-1 devices and MultiSmart Gen-2
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMultiSmart Gen-1 devices and MultiSmart Gen-2
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMultiSmart Gen-1 devices and MultiSmart Gen-2
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMultiSmart Gen-1 devices and MultiSmart Gen-2
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
- MitigationMultiSmart Gen-1 devices and MultiSmart Gen-2
Consider using proper network infrastructure controls, such as firewalls, UTM devices, VPN, or other security appliances.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan