Low severity · published Mar 16, 2020
CVE-2020-6980
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…
3.3
CVSS
0.4%
EPSS
No
On KEV
Description
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP) account data is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authentication data as it is written to the project file in cleartext.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M1
Micrologix 1100 Firmware · Rockwellautomation
All versions, or not specified · source: NVD
M1
Micrologix 1400 A Firmware · Rockwellautomation
All versions, or not specified · source: NVD
M1
Micrologix 1400 B Firmware · Rockwellautomation
through 21.001 · source: NVD
R5
Rslogix 500 · Rockwellautomation
through 12.001 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6980
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6980
Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-070-06
More from Micrologix 1100 Firmware
9.8
CVE-2020-6990
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…
9.8
CVE-2015-6490
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code…
8.6
CVE-2021-33012
Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is…
7.5
CVE-2022-3166
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition
7.5
CVE-2020-6988
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and…