CVE-2020-25180

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm (TEA) on an entered or saved password. A remote, unauthenticated attacker could pass their own encrypted password to the ISaGRAF 5 Runtime, which may result in information disclosure on the device.

• CWE-321
• CWE-798

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04Vendor Advisory
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699Permissions Required
• https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01Third Party Advisory, US Government Resource
• https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdfThird Party Advisory
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04Vendor Advisory
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699Permissions Required
• https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01Third Party Advisory, US Government Resource
• https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdfThird Party Advisory

Published

Mar 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25175GE Healthcare Imaging and Ultrasound Products may allow spec…9.8
• CVE-2020-25176Some commands used by the Rockwell Automation ISaGRAF Runtim…9.8
• CVE-2020-25177WECON PLC Editor Versions 1.3.8 and prior has a stack-based …8.8
• CVE-2020-25178ISaGRAF Workbench communicates with Rockwell Automation ISaG…8.8
• CVE-2020-25179GE Healthcare Imaging and Ultrasound Products may allow spec…9.8
• CVE-2020-2518Vulnerability in the Java VM component of Oracle Database Se…7.5
• CVE-2020-25181WECON PLC Editor Versions 1.3.8 and prior has a heap-based b…8.8
• CVE-2020-25182Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x sea…6.7
• CVE-2020-25183Medtronic MyCareLink Smart 25000 contains an authenticatio…8.8
• CVE-2020-25184Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x sto…5.5
• CVE-2020-25185The affected product is vulnerable to five post-authenticati…8.8
• CVE-2020-25186An XXE vulnerability exists within LeviStudioU Release Build…7.5