CVE:CVE-2020-25184
CNNVD:CNNVD-202106-526
Rockwell Automation ISaGRAF是美国罗克韦尔（Rockwell Automation）公司的一种用于创建集成自动化解决方案的自动化软件技术。它设计为可扩展和便携，适合开发小型控制器和大型分布式自动化系统。
Rockwell Automation ISaGRAF 存在安全漏洞，该漏洞源于将密码明文存储在与可执行文件在同一目录下的文件中。未经认证的攻击者可利用该漏洞可以破坏用户的密码，导致信息泄露。
solution:Upgrade schneider-electric easergy_t300_firmware to a higher version than 2.7.1,and avoid the version (,2.7.1]; Upgrade schneider-electric easergy_c5_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0); Upgrade schneider-electric micom_c264_firmware to a higher version than d6.1,and avoid the version (,d6.1); Upgrade schneider-electric pacis_gtw_firmware to a higher version than 5.1,5.2,6.1,6.3,and avoid the version 5.1,5.2,6.1,6.3; Upgrade schneider-electric saitel_dp_firmware to a higher version than 11.06.21,and avoid the version (,11.06.21]; Upgrade schneider-electric epas_gtw_firmware to a higher version than 6.4,and avoid the version 6.4; Upgrade schneider-electric saitel_dr_firmware to a higher version than 11.06.12,and avoid the version (,11.06.12]; Upgrade schneider-electric scd2200_firmware to a higher version than 10024,and avoid the version (,10024]; Upgrade rockwellautomation aadvance_controller to a higher version than 1.40,and avoid the version (,1.40]; Upgrade rockwellautomation isagraf_free_runtime to a higher version than 6.6.8,and avoid the version (,6.6.8]; Upgrade rockwellautomation isagraf_runtime to a higher version than 6.0,and avoid the version [5.0,6.0); Upgrade rockwellautomation micro810_firmware to a higher version than -; Upgrade rockwellautomation micro820_firmware to a higher version than -; Upgrade rockwellautomation micro830_firmware to a higher version than -; Upgrade rockwellautomation micro850_firmware to a higher version than -; Upgrade rockwellautomation micro870_firmware to a higher version than -; Upgrade xylem multismart_firmware to a higher version than 3.2.0,and avoid the version (,3.2.0)