PT-2021-7837 · Rockwell Automation · Isagraf Runtime

Published 2021-06-08 · Updated 2022-10-21 · CVE-2020-25184

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation ISaGRAF Runtime versions 4.x through 5.x

Description The issue concerns the storage of passwords in plaintext within a file located in the same directory as the executable file. This file is read by ISaGRAF Runtime, and the data, including passwords, is saved in a variable without any additional processing. A local, unauthenticated attacker could exploit this to compromise user passwords, leading to information disclosure.

Recommendations For versions 4.x through 5.x, consider implementing additional security measures to protect password storage, such as encrypting the password file or using a more secure method of storing and retrieving passwords. As a temporary workaround, restrict access to the directory containing the executable file and the password storage file to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-256

Related Identifiers

BDU:2023-03538

CVE-2020-25184

Affected Products

Isagraf Runtime

References · 8

• https://osv.dev/vulnerability/CVE-2020-25184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25184 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04 · Vendor Advisory
• https://xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03538 · Security Note
• https://vuldb.com/?id.195471 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-20-280-01 · Note
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699 · Note