CVE-2014-0755

Rockwell RSLogix 5000 Insufficiently Protected Credentials

State: Published
Severity: 6.3 Medium
Published: Feb 5, 2014
Updated: Sep 19, 2025
Reserved: Jan 2, 2014

Description

Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

Scores

CVSS	Score	Vector	Source
2.0	6.3 Medium	AV:L/AC:M/Au:N/C:C/I:C/A:N	icscert

Weaknesses

CWE-522

Affected Products

Product	Versions
RSLogix 5000 softwareRockwell Automation	V7 through V20.01Affected V7 through V21.0Affected V20.03Not affected V21.03Not affected

References

rslogix-cve20140755-info-disc(90981)vdb-entry
https://www.cisa.gov/news-events/ics-advisories/icsa-14-021-01
102858vdb-entry
65337vdb-entry
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204
http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.