Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-03-18	CVE-2020-25178	Cleartext Transmission of Sensitive Information vulnerability in multiple products ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. network schneider-electric rockwellautomation xylem CWE-319 critical	9.3
2022-03-18	CVE-2020-25176	Path Traversal vulnerability in multiple products Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file system. network schneider-electric rockwellautomation xylem CWE-22 critical	9.3