Advisories · Technology

Rockwell Automation ISaGRAF Workbench.

Every CVE that names Rockwell Automation ISaGRAF Workbench among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-2465 CVE record

CVSS 8.6 High

ISaGRAF Workbench Deserialization of Untrusted Data CWE-502
- Rockwell Automation ISaGRAF Workbench
- Insecure deserialization
Not analysed yet 25 Aug 2022
CVE-2022-2464 CVE record

CVSS 7.7 High

ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22
- Rockwell Automation ISaGRAF Workbench
- Path traversal
Not analysed yet 25 Aug 2022
CVE-2022-2463 CVE record

CVSS 6.1 Medium

ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22
- Rockwell Automation ISaGRAF Workbench
- Path traversal
Not analysed yet 25 Aug 2022
CVE-2022-1118 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Rockwell Automation ISaGRAF Deserialization of Untrusted Data
- Rockwell Automation Connected Component Workbench
- Rockwell Automation ISaGRAF Workbench
- Insecure deserialization
Not analysed yet 17 May 2022