PT-2019-6597 · Rockwell Automation · Factorytalk Security+4

Published 2019-03-26 · Updated 2025-06-26 · CVE-2010-5305

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers (affected versions not specified)

Description The issue concerns the potential exposure of the product's password, which could allow unauthorized access to the controllers. This unauthorized access could enable changes to the product's configuration or program.

Recommendations Upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.

Fix

Improper Access Control

Weakness Enumeration

CWE-255

CWE-284

Related Identifiers

CVE-2010-5305

Affected Products

Factorytalk Security

Rockwell 1747-L5X

Rockwell 1785-Lx

Rockwell Plc5

Rockwell Rslogix

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-5305 · Security Note
• https://t.me/cvenotify/126767 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-10-070-02 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-10-070-02 · Note
• http://rockwellautomation.custhelp.com/app/answers/detail/a_id/66684/kw/vulnerability/r_id/115100 · Note