NetSight
IP …
medium5.3

CVE-2020-25180

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands.

Impact

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm (TEA) on an entered or saved password. A remote, unauthenticated attacker could pass their own encrypted password to the ISaGRAF 5 Runtime, which may result in information disclosure on the device.

Affected products

VendorProductAffected versions
Schneider-ElectricEasergy T300 Firmware
through 2.7.1
Schneider-ElectricEasergy C5 Firmware
before 1.1.0
Schneider-ElectricMicom C264 Firmware
before d6.1
Schneider-ElectricPacis Gtw Firmware
Versions 5.1, 5.2, 6.1, 6.3
Schneider-ElectricSaitel Dp Firmware
through 11.06.21
Schneider-ElectricEpas Gtw Firmware
Version 6.4
Schneider-ElectricSaitel Dr Firmware
through 11.06.12
Schneider-ElectricScd2200 Firmware
through 10024
RockwellautomationAadvance Controller
through 1.40
RockwellautomationIsagraf Free Runtime
through 6.6.8
RockwellautomationIsagraf Runtime
from 5.0 before 6.0
RockwellautomationMicro810 Firmware
All versions

Weakness classification

CWE-321CWE-798

References