Security Advisory

CVE-2020-25182

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-18 18:00:30
Last updated 2025-04-16 17:59:44
Assigner icscert
State PUBLISHED

Description

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.