VulnerabilityModified
CVE-2015-1010
Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack.
MEDIUM 4.9EPSS 0.61%
Does this matter?
Lower severity and a low EPSS score (0.61%). Track it; it rarely justifies an emergency change on its own.
Description
Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack.
- CVSS 2.0
- 4.9 MEDIUMAV:L/AC:L/Au:N/C:C/I:N/A:N
- EPSS
- 0.61% probability · 48th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- rockwellautomation/rsview32
- Source
- ics-cert@hq.dhs.gov
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-132-02Third Party Advisory, US Government Resource
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/700915
- https://ics-cert.us-cert.gov/advisories/ICSA-15-132-02Third Party Advisory, US Government Resource
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/700915
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.