PT-2014-3818 · Rockwell Automation · Rslogix 5000

Publicado 2014-02-05 · Atualizado 2025-09-19 · CVE-2014-0755

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation RSLogix 5000 versions 7 through 20.01 Rockwell Automation RSLogix 5000 version 21.0

Description The issue is related to the improper implementation of password protection for .ACD files, also known as project files. This allows local users to obtain sensitive information or modify data.

Recommendations For Rockwell Automation RSLogix 5000 versions 7 through 20.01, consider restricting access to .ACD files to minimize the risk of exploitation. For Rockwell Automation RSLogix 5000 version 21.0, consider restricting access to .ACD files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

CWE-255

Identificadores relacionados

CVE-2014-0755

Produtos afetados

Rslogix 5000

Referências · 8

• http://securityfocus.com/bid/65337 · Nota
• https://t.me/cveNotify/135999 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-14-021-01 · Nota
• http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90981 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0755 · Nota de Segurança
• http://osvdb.org/102858 · Nota
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204 · Nota