6.1
Moyenne
CVE-2022-2463 Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability
Description
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the software is running at the SYSTEM level, then the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ISaGRAF Workbench 6.0 | 6.0 → 6.6.9 | Pas de correctif indiqué |
Autres CVE de ISaGRAF Workbench
Les 4 CVE de ISaGRAF Workbench →
CVE-2022-2465
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted…
8.6
Élevée
CVE-2022-2464
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability
7.7
Élevée
CVE-2022-1118
Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented…
8.6
Élevée