4.6
CVSSv2

CVE-2020-25182

Published: 18/03/2022 Updated: 05/04/2022
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated malicious user to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

schneider-electric easergy_t300_firmware

schneider-electric easergy_c5_firmware

schneider-electric micom_c264_firmware

schneider-electric pacis_gtw_firmware 5.1

schneider-electric pacis_gtw_firmware 5.2

schneider-electric pacis_gtw_firmware 6.1

schneider-electric pacis_gtw_firmware 6.3

schneider-electric saitel_dp_firmware

schneider-electric epas_gtw_firmware 6.4

schneider-electric saitel_dr_firmware

schneider-electric scd2200_firmware

rockwellautomation aadvance controller

rockwellautomation isagraf free runtime

rockwellautomation micro810_firmware -

rockwellautomation micro820_firmware -

rockwellautomation micro830_firmware -

rockwellautomation micro850_firmware -

rockwellautomation micro870_firmware -

xylem multismart firmware

rockwellautomation isagraf runtime