Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rsview32 | Rockwellautomation | * | 7.60.00 (including) |