PT-2021-7832 · Microsoft+1 · Windows+1

Published 2021-06-08 · Updated 2022-08-26 · CVE-2020-25182

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation ISaGRAF Runtime versions 4.x through 5.x

Description The issue is related to the uncontrolled loading of dynamic libraries by Rockwell Automation ISaGRAF Runtime, which could allow a local, unauthenticated attacker to execute arbitrary code. This problem only affects ISaGRAF Runtime when running on Microsoft Windows systems.

Recommendations For versions 4.x through 5.x, consider restricting the loading of dynamic libraries to prevent arbitrary code execution until a patch is available. As a temporary workaround, consider disabling the dynamic library loading feature in ISaGRAF Runtime until a fix is provided. Restrict access to the system to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2023-03464

CVE-2020-25182

Affected Products

Isagraf Runtime

Windows

References · 10

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04 · Vendor Advisory
• https://xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25182 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25182 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03464 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-20-280-01 · Note
• https://t.me/aptreports/1527 · Telegram Post
• https://t.me/cibsecurity/39259 · Telegram Post
• https://vuldb.com/?id.195484 · Note