CVE-2014-0755CWE-522

CVE-2014-0755: fallo en Rockwell Automation RSLogix 5000 software

Rockwell RSLogix 5000 Insufficiently Protected Credentials

Publicada el 05 feb 2014 · Actualizada el 19 sep 2025

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.3epss 0.6%

Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

AV:L/AC:M/Au:N/C:C/I:C/A:N

Productos afectados

Rockwell Automation · RSLogix 5000 software

Referencias

http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01 http://osvdb.org/102858 https://exchange.xforce.ibmcloud.com/vulnerabilities/90981 https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204 https://www.cisa.gov/news-events/ics-advisories/icsa-14-021-01 http://www.securityfocus.com/bid/65337