CVE-2014-0755
Rockwell RSLogix 5000 Insufficiently Protected Credentials
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
Exploit likelihood
What each source reports
CVE List Score used
Rockwell RSLogix 5000 Insufficiently Protected Credentials
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
CVE-2014-0755- CVSS 2.0
- 6.3
AV:L/AC:M/Au:N/C:C/I:C/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
EUVDEUVD-2014-0786
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
EUVD-2014-0786- CVSS 2.0
- 6.3 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jqhr-8h68-hrwh No score
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password...
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
GHSA-jqhr-8h68-hrwh- Weakness
- CWE-522
- Updated
- 2026-11-02
NVD
Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.
- Record
CVE-2014-0755- CVSS 2.0
- 6.3 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:N - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-522, CWE-255
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0755 is a vulnerability (CVSS 6.3) in Rockwell Automation Rslogix 5000 Software, published February 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/90981
cisa.gov/news-events/ics-advisories/icsa-14-021-01
osvdb.org/102858
securityfocus.com/bid/65337
rockwellautomation.custhelp.com/app/answers/detail/a_id/565204
ics-cert.us-cert.gov/advisories/ICSA-14-021-01
nvd.nist.gov/vuln/detail/CVE-2014-0755
github.com/advisories/GHSA-jqhr-8h68-hrwh