Schneider Electric SAITEL DP

Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal

Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials

Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key