Rockwell Products Impacted by Chromium Type Confusion
Successful exploitation of this vulnerability could cause a denial-of-service condition.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-1096US | high8.8OT kritisch | KEV | ||
Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-209-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationConnected Components Workbench software
Apply the update for eHIM when made available.
- MitigationEnhanced HIM (eHIM) for PowerFlex 6000T
Apply the update for eHIM when made available.
- MitigationFactoryTalk Linx Enterprise software
Apply the update for eHIM when made available.
- MitigationFactoryTalk View Site Edition
Apply the update for eHIM when made available.
- BehobenConnected Components Workbench software
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
- BehobenEnhanced HIM (eHIM) for PowerFlex 6000T
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
- BehobenFactoryTalk Linx Enterprise software
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
- BehobenFactoryTalk View Site Edition
Users currently utilizing the FactoryTalk View Site Edition should avoid using the web browser control if it is not required for the intended use of the product.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan