CVE-2014-0755

MediumCVSS 6.9/10Last modified Jun 17, 2026

Description

Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.

Metrics

CVSS 2.0 6.9/10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-522CWE-255

Affected software

No affected versions have been published.

Timeline

Published
Feb 5, 2014
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-07575.0Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer derCVE-2014-07589.3An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs viaCVE-2014-07595.9Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain priCVE-2014-07609.3The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumeCVE-2014-07617.1The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or processCVE-2014-07624.7The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker cCVE-2014-07637.5An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOCVE-2014-07647.5By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker maCVE-2014-07657.5To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, tCVE-2014-07667.5An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to oveCVE-2014-07677.5An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow CVE-2014-07687.5An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker ma
CVE-2014-0755: Medium severity, CVSS 6.9 | Vulnix