CVE-2020-25180 Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key
Remote attackers can bypass authentication using a hard-coded cryptographic key to access privileged commands and disclose information on ISaGRAF Runtime devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-25180?
CVE-2020-25180 is a medium-severity vulnerability in Rockwell Automation ISaGRAF Runtime, published on 18 Mar 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm (TEA) on an entered or saved password. A remote, unauthenticated attacker could pass their own encrypted password to the ISaGRAF 5 Runtime, which may result in information disclosure on the device.
Which versions are affected by CVE-2020-25180?
It affects 17 products.
Products include Rockwellautomation Aadvance Controller, Rockwellautomation Isagraf Free Runtime, Rockwellautomation Isagraf Runtime, Rockwellautomation Micro810 Firmware, Rockwellautomation Micro820 Firmware, Rockwellautomation Micro830 Firmware and 11 more.
How do I fix CVE-2020-25180?
No fix has been published for CVE-2020-25180 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-25180 being exploited?
There is no known exploitation of CVE-2020-25180 in the wild and no public exploit code.
Other vulnerabilities in Rockwell Automation ISaGRAF Runtime
- CVE-2020-25176 Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal
- CVE-2020-25184 Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials
- CVE-2020-25178 Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information
- CVE-2020-25182 Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element
Sources
Also known as GHSA-rq23-5rjf-c828.