CVE-2010-5305: Rockwell PLC5/SLC5/0x/RSLogix Credentials management
The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product’s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5305?
CVE-2010-5305 is considered a high severity vulnerability due to the risk of unauthorized access to sensitive control systems.
How do I fix CVE-2010-5305?
To fix CVE-2010-5305, implement strong password policies and restrict access to the affected Rockwell Automation controllers.
What systems are affected by CVE-2010-5305?
CVE-2010-5305 affects Rockwell Automation RSLogix 1785-Lx and 1747-L5x controllers.
What are the potential consequences of CVE-2010-5305?
The potential consequences of CVE-2010-5305 include unauthorized programming and configuration alterations to critical industrial control systems.
Is CVE-2010-5305 actively exploited?
There is no public indication that CVE-2010-5305 is actively exploited, but the potential for exploitation exists.