CVE-2020-25184

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the file and saves the data in a variable without any additional modification. A local, unauthenticated attacker could compromise the user passwords, resulting in information disclosure.

• CWE-256
• CWE-522

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04Vendor Advisory
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699Permissions Required
• https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01Third Party Advisory, US Government Resource
• https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdfVendor Advisory
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04Vendor Advisory
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699Permissions Required
• https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01Third Party Advisory, US Government Resource
• https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-multismart-rockwell-isagraf.pdfVendor Advisory

Published

Mar 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25179GE Healthcare Imaging and Ultrasound Products may allow spec…9.8
• CVE-2020-2518Vulnerability in the Java VM component of Oracle Database Se…7.5
• CVE-2020-25180Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x inc…6.5
• CVE-2020-25181WECON PLC Editor Versions 1.3.8 and prior has a heap-based b…8.8
• CVE-2020-25182Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x sea…6.7
• CVE-2020-25183Medtronic MyCareLink Smart 25000 contains an authenticatio…8.8
• CVE-2020-25185The affected product is vulnerable to five post-authenticati…8.8
• CVE-2020-25186An XXE vulnerability exists within LeviStudioU Release Build…7.5
• CVE-2020-25187Medtronic MyCareLink Smart 25000 is  vulnerable when an au…9.8
• CVE-2020-25188An attacker who convinces a valid user to open a specially c…7.8
• CVE-2020-25189The affected product is vulnerable to three stack-based buff…9.8
• CVE-2020-2519Vulnerability in the Oracle WebLogic Server product of Oracl…4.3