Skip to content
OpenAdvisories
Medium SEVD-2022-284-03 3 CVEs

ISaGRAF Workbench for SAGE RTU

Published Oct 10, 2022 · Updated Nov 14, 2025 · Revision 2

Vendor: Rockwell Automation Vendor: Schneider Electric Product: ISaGRAF Workbench Product: SAGE RTU C3412 CPU Product: SAGE RTU C3413 CPU Product: SAGE RTU C3414 CPU

Summary

Schneider Electric is aware of multiple vulnerabilities in the third party ISaGRAF Workbench software used by SAGE RTU products.
The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along to a SCADA software platform.
Failure to apply the mitigations provided below may risk remote code execution, which could result in privilege escalation that will allow an attacker to gain the privileges of the software. If the software is running at SYSTEM level, an attacker may gain admin level privileges. These vulnerabilities can only be exploited when users open the TCP listening ports on the RTU and connect with ISaGRAF Workbench.

Vulnerabilities 3

  • High 8.6
    CVE-2022-2465

    ISaGRAF Workbench Deserialization of Untrusted Data CWE-502

    Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a …

    Rockwell Automation ISaGRAF Workbench ICS / OT
  • High 7.7
    CVE-2022-2464

    ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22

    Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an…

    Rockwell Automation ISaGRAF Workbench ICS / OT
  • Medium 6.1
    CVE-2022-2463

    ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22

    Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the …

    Rockwell Automation ISaGRAF Workbench ICS / OT

Revision history

  1. #2.0.0

    Corrected Known Affected Versions for SAGE RTU

  2. #1.0.0

    Original Release

References