PT-2014-3818 · Rockwell Automation · Rslogix 5000

Published 2014-02-05 · Updated 2025-09-19 · CVE-2014-0755

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation RSLogix 5000 versions 7 through 20.01 Rockwell Automation RSLogix 5000 version 21.0

Description The issue is related to the improper implementation of password protection for .ACD files, also known as project files. This allows local users to obtain sensitive information or modify data.

Recommendations For Rockwell Automation RSLogix 5000 versions 7 through 20.01, consider restricting access to .ACD files to minimize the risk of exploitation. For Rockwell Automation RSLogix 5000 version 21.0, consider restricting access to .ACD files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-255

Related Identifiers

CVE-2014-0755

Affected Products

Rslogix 5000

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2014-0755 · Security Note
• http://securityfocus.com/bid/65337 · Note
• https://t.me/cveNotify/135999 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-14-021-01 · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90981 · Note
• http://osvdb.org/102858 · Note
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204 · Note