CVE-2010-5305

Rockwell PLC5/SLC5/0x/RSLogix Credentials management

published March 26, 2019

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ A hidden password vulnerability could leave your Rockwell controllers wide open! Anyone with access could waltz in and make unauthorized changes. 🔓 Think of it like a restaurant where the chef accidentally left the back door unlocked. Any curious diner could waltz in and change the menu or even mess with the kitchen equipment! If exploited, an unauthorized user could gain access to the product's configuration and programming. This could lead to unauthorized changes that impact your operations, leaving your system vulnerable to misconfigurations or malicious alterations. Safeguarding your controllers is essential to maintaining system integrity.

Put simply

Think of it like a restaurant where the chef accidentally left the back door unlocked. Any curious diner could waltz in and change the menu or even mess with the kitchen equipment! This vulnerability allows the exposure of passwords used for restricting access to Rockwell PLC5/SLC5/0x/RSLogix controllers. An unauthorized programming client could exploit this flaw to gain access and modify critical system configurations.

What to do

If exploited, an unauthorized user could gain access to the product's configuration and programming. This could lead to unauthorized changes that impact your operations, leaving your system vulnerable to misconfigurations or malicious alterations. Safeguarding your controllers is essential to maintaining system integrity. To mitigate this risk, upgrade your firmware to the latest version that supports enhanced security features compatible with Rockwell Automation's FactoryTalk Security services. Regularly audit your system for unauthorized access and secure all access points. You’ve got the power to lock it down! With these updates, you can keep your controllers safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05695 · 93.0th percentile
Published
2019-03-26T17:24Z
EPSS history
Timeline
  • 26 MAR 17:24Z
    Rockwell PLC5/SLC5/0x/RSLogix Credentials management
    cvelistv5