Rockwell RSLogix 5000 Insufficiently Protected Credentials
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.6%
probabilidade de exploração
0.6%top 54% das CVEs
exploração observada
nãonenhuma fonte reporta
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
AV:L/AC:M/Au:N/C:C/I:C/A:N
Produtos afetados
Rockwell Automation · RSLogix 5000 softwareReferências
http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01http://osvdb.org/102858https://exchange.xforce.ibmcloud.com/vulnerabilities/90981https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204https://www.cisa.gov/news-events/ics-advisories/icsa-14-021-01http://www.securityfocus.com/bid/65337