Rockwell Automation ISaGRAF Workbench
Successful exploitation of these vulnerabilities could result in directory traversal, privilege escalation, and arbitrary code execution.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-2465US | high7.8 | — | ||
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the ob… | ||||
| CVE-2022-2464US | high7.8 | — | ||
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse… | ||||
| CVE-2022-2463US | high7.8 | — | ||
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacke… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-202-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationISaGRAF Workbench
Do not click web links or open attachments in unsolicited email messages.
- MitigationISaGRAF Workbench
Do not click web links or open attachments in unsolicited email messages.
- MitigationISaGRAF Workbench
Do not click web links or open attachments in unsolicited email messages.
- FixedISaGRAF Workbench
Do not open untrusted .7z exchange files with ISaGRAF Workbench. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.
- FixedISaGRAF Workbench
Do not open untrusted .7z exchange files with ISaGRAF Workbench. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.
- FixedISaGRAF Workbench
Do not open untrusted .7z exchange files with ISaGRAF Workbench. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan