Skip to content
Sign in
8.6 High

CVE-2021-27475 Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be…

Description

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

Affected products and versions

Product Affected versions Fixed in
Connected Components Workbench 12.00 earliest → 12.00.00 No fix stated

Other CVEs of Connected Components Workbench

The 3 CVEs of Connected Components Workbench →
CVE-2021-27471 The parsing mechanism that processes certain file types does not provide input sanitization for file paths 7.7 High CVE-2021-27473 Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the… 6.1 Medium
Track this CVE