Rockwell Automation SIS Workstation and ISaGRAF Workbench
view advisory published 2023-11-14
Successful exploitation of this vulnerability could allow unprivileged local users to overwrite files replacing them with malicious programs.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-9268US | high7.8 | — | ||
Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-318-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-318-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- MitigationISaGRAF Workbench
Rockwell Automation recommends users of the affected software to update the affected product to the latest version:
- MitigationSafety Instrumented System Workstation
Rockwell Automation recommends users of the affected software to update the affected product to the latest version:
- FixedISaGRAF Workbench
ISaGRAF Workbench: v6.06.10 and later
- FixedSafety Instrumented System Workstation
Safety Instrumented System Workstation: v2.00 and later
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan