What’s Vulnerable › Vulnerabilities

CVE-2014-0755: Rockwell RSLogix 5000 Insufficiently Protected Credentials

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-02-05 · updated 2026-06-17
• Weakness: CWE-522

Description

Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

Affected products

• Rockwell Automation RSLogix 5000 software: 7.0, 18.0, 20.01, 21.0

References

• http://osvdb.org/102858
• http://www.securityfocus.com/bid/65337
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90981
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/565204
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-021-01
• http://ics-cert.us-cert.gov/advisories/ICSA-14-021-01
• http://osvdb.org/102858
• http://www.securityfocus.com/bid/65337
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90981

Get alerted when CVE-2014-0755 or the next vulnerability affects your stack