Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-2463

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the software is running at the SYSTEM level, then the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.

Published

2022-08-25T18:15:10.067

Last Modified

2024-11-21T07:01:02.423

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses

Type: Secondary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	rockwellautomation	isagraf_workbench	≤ 6.6.9	Yes

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03 Mitigation, Patch, Third Party Advisory, US Government Resource ([email protected])
https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03 Mitigation, Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)