CVEvulnerability

CVE-2010-5305

9.8 CRITICAL Published 2019-03-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2019-03-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-255, CWE-284

Description

The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product’s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.

Affected configurations

• rockwellautomation rslogix • rockwellautomation plc5 1785-lx firmware • rockwellautomation slc5\/01 1747-l5x firmware

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References