Advisories · Technology

Rockwell Automation Connected Component Workbench.

Every CVE that names Rockwell Automation Connected Component Workbench among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-1118 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Rockwell Automation ISaGRAF Deserialization of Untrusted Data
- Rockwell Automation Connected Component Workbench
- Rockwell Automation ISaGRAF Workbench
- Insecure deserialization
Not analysed yet 17 May 2022
CVE-2022-1018 CVE record

CVSS 5.5 Medium

ICSA-22-088-01 Rockwell Automation ISaGRAF
- Rockwell Automation Connected Component Workbench
- Rockwell Automation ISaGRAF
- XML external entities (XXE)
Not analysed yet 1 Apr 2022