CVE-2010-5305 Rockwell PLC5/SLC5/0x/RSLogix Credentials management
Exposure of controller passwords allows unauthorized clients to access and modify PLC configurations and programs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-5305?
CVE-2010-5305 is a critical vulnerability in Rockwell Automation PLC5, published on 26 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product’s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.
Which versions are affected by CVE-2010-5305?
It affects 3 products.
Products include Rockwellautomation Plc5 1785-Lx Firmware, Rockwellautomation Rslogix, Rockwellautomation Slc5\/01 1747-L5x Firmware.
How do I fix CVE-2010-5305?
No fix has been published for CVE-2010-5305 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-5305 being exploited?
There is no known exploitation of CVE-2010-5305 in the wild and no public exploit code.
Sources
Also known as GHSA-qxcv-34v8-5wrh.