cbcvebase.
CVE-2020-25182
published 2022-03-18

CVE-2020-25182: Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could…

PriorityP432medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.42%
34.2th percentile
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.

Affected

17 ranges
VendorProductVersion rangeFixed in
rockwell_automationisagraf_runtime
rockwell_automationisagraf_runtime
rockwellautomationaadvance_controller<= 1.40
rockwellautomationisagraf_free_runtime<= 6.6.8
rockwellautomationisagraf_runtime>= 5.0 < 6.06.0
schneider-electriceasergy_c5_firmware< 1.1.01.1.0
schneider-electriceasergy_t300_firmware<= 2.7.1
schneider-electricepas_gtw_firmware
schneider-electricmicom_c264_firmware< d6.1d6.1
schneider-electricpacis_gtw_firmware
schneider-electricpacis_gtw_firmware
schneider-electricpacis_gtw_firmware
schneider-electricpacis_gtw_firmware
schneider-electricsaitel_dp_firmware<= 11.06.21
schneider-electricsaitel_dr_firmware<= 11.06.12
schneider-electricscd2200_firmware<= 10024
xylemmultismart_firmware< 3.2.03.2.0

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.