PT-2014-1960 · Rockwell Automation · Rsview32

Dmitry Dementjev + 1 · Publicado 2014-12-01 · Atualizado 2015-06-02 · CVE-2015-1010

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation RSView32 versions 7.60.00 and earlier

Description The issue is related to errors in the password encryption algorithm of the RSView32 SCADA system, which can be exploited by a local attacker to gain access to the system and make unauthorized changes to the controlled process, potentially leading to its shutdown or creation of an emergency situation. Local users can obtain sensitive information by reading a file and conducting a decryption attack due to improper encryption of credentials.

Recommendations For Rockwell Automation RSView32 versions 7.60.00 and earlier, update to a version that properly encrypts credentials to prevent local users from obtaining sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

BDU:2015-12167

CVE-2015-1010

Produtos afetados

Rsview32

Referências · 5

• http://pcweek.ru/industrial/news-company/detail.php?ID=174605 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1010 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-132-02 · Nota
• https://bdu.fstec.ru/vul/2015-12167 · Nota de Segurança
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/700915 · Nota