ICSA-22-095-01

icsaUScisa_csaf_ot

Rockwell Automation ISaGRAF

view advisory published 2022-04-05

Successful exploitation of this vulnerability could allow arbitrary code execution.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-1118UShigh7.8—
Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers))…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationConnected Component Workbench

    Do not open untrusted files with Connected Component Workbench, ISaGRAF, SISW. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • MitigationISaGRAF Workbench

    Do not open untrusted files with Connected Component Workbench, ISaGRAF, SISW. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • MitigationSafety Instrumented Systems Workstation

    Do not open untrusted files with Connected Component Workbench, ISaGRAF, SISW. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

  • FixedConnected Component Workbench

    For the ISaGRAF Workbench and Safety Instrumented Systems Workstation, Rockwell Automation encourages users to use mitigations listed below until a patch is released. More mitigation actions are planned.

  • FixedISaGRAF Workbench

    For the ISaGRAF Workbench and Safety Instrumented Systems Workstation, Rockwell Automation encourages users to use mitigations listed below until a patch is released. More mitigation actions are planned.

  • FixedSafety Instrumented Systems Workstation

    For the ISaGRAF Workbench and Safety Instrumented Systems Workstation, Rockwell Automation encourages users to use mitigations listed below until a patch is released. More mitigation actions are planned.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan