CVE-2020-25184

CVE-2020-25184 is a medium-severity vulnerability affecting Rockwell Automation ISaGRAF Runtime versions 4.x and 5.x, as well as products from Schneider Electric and Xylem that utilize this runtime. The vulnerability involves the storage of user passwords in plaintext within a file located in the same directory as the executable, leading to information disclosure. A local, unauthenticated attacker can exploit this with low attack complexity, resulting in high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, and it has received minimal community discussion and media coverage.