Description
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | ISaGRAF Workbench | 6.0 – ≤ 6.6.9 | — |
Advisories 2
- SEVD-2022-284-03 ISaGRAF Workbench for SAGE RTU Schneider Electric CPCERT · Nov 14, 2025
- ICSA-22-202-03 Rockwell Automation ISaGRAF Workbench CISA ICS & IT advisories · Jul 21, 2022