Cleartext storage of sensitive information in Rockwell Automation MicroLogix 1400…
Priority LOW 16CWE-312Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-312.
Summary
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP) account data is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authentication data as it is written to the project file in cleartext.
Why it matters now
EPSS 0.00415 36th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior | Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior | — | No fix listed | CNA |
- Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior Vendor— Affected Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:rockwellautomation:micrologix_1400_a_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Rockwell |
| cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:* | up to 21.001 | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:a:rockwellautomation:rslogix_500:*:*:*:*:*:*:*:* | up to 12.001 | Vulnerable | Rockwell |
- cpe:2.3:o:rockwellautomation:micrologix_1400_a_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Rockwell
- cpe:2.3:o:rockwellautomation:micrologix_1400_b_firmware:*:*:*:*:*:*:*:* Versions up to 21.001 Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:a:rockwellautomation:rslogix_500:*:*:*:*:*:*:*:* Versions up to 12.001 Vulnerable ·Rockwell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-6980
- 2026-10-03 Alias added: GHSA-5cqw-2967-vc56
References
More Rockwell Micrologix 1100 Firmware vulnerabilities
- TI-2015-05450 Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000… CVSS 3.1CRITICAL 9.8
- TI-2020-05638 Hard-coded credentials in Rockwell Automation MicroLogix 1400 Controllers Series B… CVSS 3.1CRITICAL 9.8
- TI-2020-05632 Broken or risky cryptographic algorithm in Rockwell Automation MicroLogix 1400… CVSS 3.1CRITICAL 9.8
- TI-2021-12619 Improper input validation in Rockwell Automation MicroLogix 1100 CVSS 3.1HIGH 8.6
- TI-2015-05452 Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN… CVSS 3.1HIGH 7.5
- TI-2020-05636 Improper authentication in Rockwell Automation MicroLogix 1400 Controllers Series B… CVSS 3.1HIGH 7.5
Sources
- CVE-2020-6980 · CVE Program
- CVE-2020-6980 · NVD
- FIRST EPSS
- GHSA-5cqw-2967-vc56 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences