PT-2021-7762 · Rockwell Automation · Isagraf Runtime

Published 2021-06-08 · Updated 2022-08-26 · CVE-2020-25180

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation ISaGRAF Runtime versions 4.x through 5.x

Description The issue concerns the encryption of passwords used to execute privileged commands in the ISaGRAF Runtime. Specifically, a fixed key value is used with the tiny encryption algorithm (TEA) to encrypt entered or saved passwords. A remote, unauthenticated attacker could potentially pass their own encrypted password to the ISaGRAF 5 Runtime, leading to information disclosure on the device.

Recommendations For versions 4.x through 5.x, consider disabling the password functionality until a secure method of encryption is implemented. As a temporary workaround, restrict access to the ISaGRAF Runtime to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-321

CWE-798

Related Identifiers

BDU:2023-02701

CVE-2020-25180

Affected Products

Isagraf Runtime

References · 9

• https://bdu.fstec.ru/vul/2023-02701 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25180 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25180 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-20-280-01 · Note
• https://t.me/aptreports/1527 · Telegram Post
• https://xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf · Note
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699 · Note
• https://vuldb.com/ru/?id.195461 · Note