CVE-2020-6990
highpriority · track · 41OT risk · elevatedEPSS 0.044 · 91 %ileEURUUSEPSS · scored 2026-10-27
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationMicroLogix 1100 Controllercisa_csaf_ot
Rockwell Automation reports that there are currently no mitigations for MicroLogix 1400 series A controllers or MicroLogix 1100 controllers.
- MitigationRSLogix 500 Softwarecisa_csaf_ot
Rockwell Automation reports that there are currently no mitigations for MicroLogix 1400 series A controllers or MicroLogix 1100 controllers.
- MitigationSeries Acisa_csaf_ot
Rockwell Automation reports that there are currently no mitigations for MicroLogix 1400 series A controllers or MicroLogix 1100 controllers.
- MitigationSeries Bcisa_csaf_ot
Rockwell Automation reports that there are currently no mitigations for MicroLogix 1400 series A controllers or MicroLogix 1100 controllers.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9–10
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (17)
Products and version ranges known to be affected.
- n/a Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior≤ Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and priorenisa_euvdEU
- rockwellautomation micrologix 1100 firmwareall versionsnvdUScpe:2.3:o:rockwellautomation:micrologix_1100_firmware:*:*:*:*:*:*:*:*
- rockwellautomation micrologix 1400 a firmwareall versionsnvdUScpe:2.3:o:rockwellautomation:micrologix_1400_a_firmware:*:*:*:*:*:*:*:*
- rockwellautomation micrologix 1400 b firmware≤ 21.001nvdUScpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-20-070-06Rockwell Automation MicroLogix Controllers and RSLogix 500 Software2020-03-10icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to gain access to sensitive project file information including passwords.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- http://www.nsfocus.net/vulndb/46115cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-6990cnnvd
- https://www.rockwellautomation.com/Patchcnnvd
- https://www.us-cert.gov/ics/advisories/icsa-20-070-06cnnvd
- https://www.us-cert.gov/ics/advisories/icsa-20-070-06enisa_euvd
- https://www.us-cert.gov/ics/advisories/icsa-20-070-06Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan