Rockwell Products Impacted by Chromium Type Confusion
Successful exploitation of this vulnerability could cause a denial-of-service condition.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-1096US | high8.8OT critical | KEV | ||
Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-209-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationConnected Components Workbench software
Apply the update for eHIM when made available.
- MitigationEnhanced HIM (eHIM) for PowerFlex 6000T
Apply the update for eHIM when made available.
- MitigationFactoryTalk Linx Enterprise software
Apply the update for eHIM when made available.
- MitigationFactoryTalk View Site Edition
Apply the update for eHIM when made available.
- FixedConnected Components Workbench software
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
- FixedEnhanced HIM (eHIM) for PowerFlex 6000T
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
- FixedFactoryTalk Linx Enterprise software
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
- FixedFactoryTalk View Site Edition
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan