Skip to content
OpenAdvisories
High ICSA-22-202-03 3 CVEs

Rockwell Automation ISaGRAF Workbench

Published Jul 21, 2022 · Updated Jul 21, 2022

Vendor: Rockwell Automation Product: ISaGRAF Workbench

Summary

Successful exploitation of these vulnerabilities could result in directory traversal, privilege escalation, and arbitrary code execution.

Vulnerabilities 3

  • High 8.6
    CVE-2022-2465

    ISaGRAF Workbench Deserialization of Untrusted Data CWE-502

    Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a …

    Rockwell Automation ISaGRAF Workbench ICS / OT
  • High 7.7
    CVE-2022-2464

    ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22

    Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an…

    Rockwell Automation ISaGRAF Workbench ICS / OT
  • Medium 6.1
    CVE-2022-2463

    ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22

    Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the …

    Rockwell Automation ISaGRAF Workbench ICS / OT

Revision history

  1. #1

    Publication Date

References