Security readout for executives and security teams
Plain-English summary
CVE-2015-1010 is a credential-protection weakness in Rockwell Automation RSView32 7.60.00, also called CPR9 SR4, and earlier. A local user could recover sensitive credentials from a file through a decryption attack. The main business risk is misuse of exposed industrial-control credentials after local workstation access is obtained.
Executive priority
Prioritize if RSView32 supports operational technology environments or shared engineering workstations. The vulnerability is local, but exposed credentials can extend impact beyond one host. Because remediation details are not in the supplied data, assign ownership to OT asset management and verify vendor guidance.
Technical view
The CVE describes improper credential encryption in RSView32 7.60.00 and earlier. Exploitation requires local access and involves credential recovery from stored data. The source bundle provides no CVSS score, CWE mapping, or confirmed remediation details, so exposure assessment depends on local product inventory and vendor advisory review.
Likely exposure
Exposure is most likely on legacy systems running Rockwell Automation RSView32 7.60.00 or earlier, particularly engineering or HMI workstations where local users can access application files. The provided affected-product metadata is incomplete, so validate against vendor advisories.
Exploitation context
The source bundle does not show CISA KEV listing or evidence of active exploitation. The described attack is local, not remote, and depends on access to a file plus a decryption attack. Treat this as credential-exposure risk after workstation compromise or insider access.
Researcher notes
The CVE record is sparse: no CVSS, CWE, CPE, or explicit patch information is included in the supplied bundle. Do not assume remote exploitability or active exploitation. Focus analysis on local credential exposure, affected RSView32 versions, and vendor-advisory confirmation.
Mitigation direction
- Check Rockwell Automation advisory 700915 for supported remediation guidance.
- Review ICSA-15-132-02 for ICS-specific recommendations and affected-version details.
- Inventory RSView32 deployments and prioritize versions 7.60.00 and earlier.
- Restrict local access to RSView32 hosts and project/configuration files.
- Rotate credentials that may have been stored on affected systems.
Validation and detection
- Confirm whether RSView32 is installed and record the exact version.
- Identify systems running RSView32 7.60.00, CPR9 SR4, or earlier.
- Review file permissions for RSView32 credential or configuration storage locations.
- Check whether local users have unnecessary access to affected workstations.
- Document vendor-advisory status, mitigation decisions, and credential-rotation evidence.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2015-1010 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/700915CVE reference · x_refsource_MISC
- https://ics-cert.us-cert.gov/advisories/ICSA-15-132-02CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.