Skip to content
OpenAdvisories
Critical ICSA-20-280-01 5 CVEs

Rockwell Automation ISaGRAF5 Runtime (Update A)

Published Oct 6, 2020 · Updated Jun 17, 2021 · Revision 3

Vendor: Rockwell Automation Product: AADvance Controller Product: GE Steam Power's ALSPA S6 MFC3000 and MFC1000 Product: ISaGRAF Free Runtime in ISaGRAF6 Workbench Product: Micro800 family Product: MultiSmart Gen-1 devices and MultiSmart Gen-2

Summary

Successful exploitation of these vulnerabilities may result in remote code execution, information disclosure, or a denial-of-service condition.

Vulnerabilities 5

  • Critical 9.1
    CVE-2020-25176

    Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal

    Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file system. Since the parameter pointing to the file name is not checked for reserved characters, it is po…

    Rockwell Automation ISaGRAF Runtime ICS / OT
  • High 7.8
    CVE-2020-25184

    Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials

    Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the file and saves the data in a variable without any additional modification. A lo…

    Rockwell Automation ISaGRAF Runtime ICS / OT
  • High 7.5
    CVE-2020-25178

    Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information

    ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. This communication protocol provides various file system operations, as well as the uploading of applications. Data is transferred over this protocol un…

    Rockwell Automation ISaGRAF Runtime ICS / OT
  • Medium 6.7
    CVE-2020-25182

    Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element

    Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGR…

    Rockwell Automation ISaGRAF Runtime ICS / OT
  • Medium 5.3
    CVE-2020-25180

    Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key

    Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key valu…

    Rockwell Automation ISaGRAF Runtime ICS / OT

Revision history

  1. #3

    ICSA-20-280-01 Rockwell Automation ISaGRAF5 Runtime (Update B)

  2. #2

    ICSA-20-280-01 Rockwell Automation ISaGRAF5 Runtime (Update A)

  3. #1

    ICSA-20-280-01P Rockwell Automation ISaGRAF5 Runtime

References