CVE-2014-0755CWE-522

CVE-2014-0755: falha em Rockwell Automation RSLogix 5000 software

Rockwell RSLogix 5000 Insufficiently Protected Credentials

Publicada em 05 fev 2014 · Atualizada em 19 set 2025

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.6%

Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

AV:L/AC:M/Au:N/C:C/I:C/A:N

Produtos afetados

Rockwell Automation · RSLogix 5000 software

Referências

http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01 http://osvdb.org/102858 https://exchange.xforce.ibmcloud.com/vulnerabilities/90981 https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204 https://www.cisa.gov/news-events/ics-advisories/icsa-14-021-01 http://www.securityfocus.com/bid/65337