6.7
Moyenne
CVE-2020-25182 Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries
Description
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ISaGRAF Runtime | 5.x | Pas de correctif indiqué |
| ISaGRAF Runtime | 4.x | Pas de correctif indiqué |
Autres CVE de ISaGRAF Runtime
Les 5 CVE de ISaGRAF Runtime →
CVE-2020-25180
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is…
5.3
Moyenne
CVE-2020-25184
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the…
7.8
Élevée
CVE-2020-25176
Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform…
9.1
Critique
CVE-2020-25178
ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP
7.5
Élevée