CVE-2014-0755

Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

Score

CVSS 2.0 6.9 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-02-05

Last modified

2025-09-19

Weaknesses

CWE-255, CWE-522

Affected products

• Rslogix 5000 Software (Rockwell Automation)
• Rslogix 5000 Design And Configuration Software (Rockwellautomation)

References

• http://osvdb.org/102858
• http://www.securityfocus.com/bid/65337
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90981
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-021-01
• http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01