Description (CNA)
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / RSLogix 5000 software | affected V7 through V20.01; affected V7 through V21.0; unaffected V20.03; unaffected V21.03 |
CWE
CWE-522
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90981
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-021-01
- http://osvdb.org/102858
- http://www.securityfocus.com/bid/65337
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204
ADP enrichment
No English description supplied.