CVE-2020-25182

MEDIUM

Schneider-electric Easergy T300 Firmware - Uncontrolled Search Path

Title source: rule
STIX 2.1

Description

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.

References (4)

Core 4
Core References
Third Party Advisory, US Government Resource x_refsource_confirm
https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01
Permissions Required, Vendor Advisory x_refsource_confirm
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699

Scores

CVSS v3 6.7
EPSS 0.0001
EPSS Percentile 3.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-427
Status published
Products (20)
rockwellautomation/aadvance_controller < 1.40
rockwellautomation/isagraf_free_runtime < 6.6.8
rockwellautomation/isagraf_runtime 5.0 - 6.0
rockwellautomation/micro810_firmware
rockwellautomation/micro820_firmware
rockwellautomation/micro830_firmware
rockwellautomation/micro850_firmware
rockwellautomation/micro870_firmware
schneider-electric/easergy_c5_firmware < 1.1.0
schneider-electric/easergy_t300_firmware < 2.7.1
... and 10 more
Published Mar 18, 2022
Tracked Since Feb 18, 2026