PT-2014-1960 · Rockwell Automation · Rsview32

Dmitry Dementjev + 1 · Published 2014-12-01 · Updated 2015-06-02 · CVE-2015-1010

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation RSView32 versions 7.60.00 and earlier

Description The issue is related to errors in the password encryption algorithm of the RSView32 SCADA system, which can be exploited by a local attacker to gain access to the system and make unauthorized changes to the controlled process, potentially leading to its shutdown or creation of an emergency situation. Local users can obtain sensitive information by reading a file and conducting a decryption attack due to improper encryption of credentials.

Recommendations For Rockwell Automation RSView32 versions 7.60.00 and earlier, update to a version that properly encrypts credentials to prevent local users from obtaining sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

BDU:2015-12167

CVE-2015-1010

Affected Products

Rsview32

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-1010 · Security Note
• https://bdu.fstec.ru/vul/2015-12167 · Security Note
• http://pcweek.ru/industrial/news-company/detail.php?ID=174605 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-132-02 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/700915 · Note