Rockwellautomation Connected Components Workbench vulnerabilities

6 CVEs affecting Rockwellautomation Connected Components Workbench, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-1018, published 2022-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-5424, published 2014-11-14. High severity, CVSS 7.5. EPSS: 11% chance of exploitation in the next 30 days. Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an invalid…
CVE-2021-27475, published 2022-03-23. High severity, CVSS 8.6. EPSS: 3% chance of exploitation in the next 30 days. Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object…
CVE-2021-27471, published 2022-03-23. High severity, CVSS 8.6. EPSS: 2.9% chance of exploitation in the next 30 days. The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Rockwell…
CVE-2022-1018, published 2022-04-01. Medium severity, CVSS 5.5. EPSS: 2.2% chance of exploitation in the next 30 days. When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker…
CVE-2021-27473, published 2022-03-23. High severity, CVSS 8.2. EPSS: 0.8% chance of exploitation in the next 30 days. Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccwarc archive file during extraction. This type of vulnerability is also commonly…
CVE-2017-5176, published 2017-05-19. High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days. A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and…