Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-2464

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful.

Published

2022-08-25T18:15:10.143

Last Modified

2024-11-21T07:01:02.567

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.7 (HIGH)

Weaknesses

Type: Secondary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	rockwellautomation	isagraf_workbench	≤ 6.6.9	Yes

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03 Mitigation, Patch, Third Party Advisory, US Government Resource ([email protected])
https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03 Mitigation, Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)