Aller au contenu
Se connecter
8.6 Élevée

CVE-2021-27475 Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be…

Description

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

Produits et versions touchés

Produit Versions touchées Corrigé en
Connected Components Workbench 12.00 premières → 12.00.00 Pas de correctif indiqué

Autres CVE de Connected Components Workbench

Les 3 CVE de Connected Components Workbench →
CVE-2021-27471 The parsing mechanism that processes certain file types does not provide input sanitization for file paths 7.7 Élevée CVE-2021-27473 Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the… 6.1 Moyenne
Suivre cette CVE