PT-2021-7838 · Rockwell Automation · Isagraf Runtime

Published 2021-06-08 · Updated 2022-04-04 · CVE-2020-25178

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ISaGRAF Workbench versions 4.x through 5.x

Description The issue is related to the communication protocol used by ISaGRAF Workbench to interact with Rockwell Automation ISaGRAF Runtime. This protocol, which operates over TCP/IP, allows for various file system operations, including the uploading of applications. However, data transferred via this protocol is unencrypted, potentially enabling a remote, unauthenticated attacker to upload, read, and delete files.

Recommendations For versions 4.x through 5.x, consider implementing encryption for data transferred over the TCP/IP protocol to prevent unauthorized access. As a temporary workaround, restrict access to the TCP/IP communication protocol to minimize the risk of exploitation.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2023-03539

CVE-2020-25178

Affected Products

Isagraf Runtime

References · 8

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04 · Vendor Advisory
• https://xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03539 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25178 · Security Note
• https://vuldb.com/?id.195460 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-20-280-01 · Note
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699 · Note