Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-03-18	CVE-2020-25180	Use of Hard-coded Credentials vulnerability in multiple products Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. network schneider-electric rockwellautomation xylem CWE-798	4.3
2022-03-18	CVE-2020-25182	Uncontrolled Search Path Element vulnerability in multiple products Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. local low complexity schneider-electric rockwellautomation xylem CWE-427	4.6
2022-03-18	CVE-2020-25184	Insufficiently Protected Credentials vulnerability in multiple products Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. local low complexity schneider-electric rockwellautomation xylem CWE-522	5.5