CVE-2020-25180

Description

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm (TEA) on an entered or saved password. A remote, unauthenticated attacker could pass their own encrypted password to the ISaGRAF 5 Runtime, which may result in information disclosure on the device.

Weakness classification

• CWE-321: Use of Hard-coded Cryptographic Key
• CWE-798: Use of Hard-coded Credentials

Primary references

• ics-cert@hq.dhs.gov — Vendor Advisory
• ics-cert@hq.dhs.gov — Permissions Required
• ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
• ics-cert@hq.dhs.gov — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory