Vulnerability in Rockwellautomation Rsview32

CVE-2015-1010

Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.006 (45.9th percentile) — read the EPSS interpretation.

Affected products

Rockwellautomation Rsview32
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

ics-cert@hq.dhs.gov (x_refsource_MISC)
ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)