CVEvulnerability

CVE-2014-0755

6.9 MEDIUM Published 2014-02-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-02-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.3 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:N
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-255, CWE-522

Description

Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

Affected configurations

• rockwellautomation rslogix 5000 design and configuration software 7.0 • rockwellautomation rslogix 5000 design and configuration software 18.0 • rockwellautomation rslogix 5000 design and configuration software 20.01 • rockwellautomation rslogix 5000 design and configuration software 21.0

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References