CVE-2022-1018
mediumpriority · track · 23EPSS 0.022 · 82 %ileEURUUSEPSS · scored 2026-10-28
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedConnected Component Workbenchcisa_csaf_ot
Safety Instrumented Systems Workstation: Update to v1.2
https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&mode=3&refSoft=1&versions=60852 - FixedISaGRAF Workbenchcisa_csaf_ot
Safety Instrumented Systems Workstation: Update to v1.2
https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&mode=3&refSoft=1&versions=60852 - FixedSafety Instrumented Systems Workstationcisa_csaf_ot
Safety Instrumented Systems Workstation: Update to v1.2
https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&mode=3&refSoft=1&versions=60852 - MitigationConnected Component Workbenchcisa_csaf_ot
Do not open untrusted files with Connected Component Workbench, ISaGRAF, SISW. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.
- MitigationISaGRAF Workbenchcisa_csaf_ot
Do not open untrusted files with Connected Component Workbench, ISaGRAF, SISW. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.
- MitigationSafety Instrumented Systems Workstationcisa_csaf_ot
Do not open untrusted files with Connected Component Workbench, ISaGRAF, SISW. Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (17)
Products and version ranges known to be affected.
- rockwellautomation connected components workbench≤ 12.0nvdUScpe:2.3:a:rockwellautomation:connected_components_workbench:*:*:*:*:*:*:*:*
- rockwellautomation safety instrumented systems workstation≤ 1.1nvdUScpe:2.3:o:rockwellautomation:safety_instrumented_systems_workstation:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-22-088-01Rockwell Automation ISaGRAF2022-03-29icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to pass local file data to a remote web server, leading to loss of confidentiality.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-1018/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-088-01cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.1331cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-01cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022033008cnnvd
- https://www.rockwellautomation.com/en-in/trust-center/security-advisories/advisory.PN1588.htmlPatchcnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-01enisa_euvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-01MitigationPatchThird Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan