Rockwellautomation Isagraf Workbench vulnerabilities

4 CVEs affecting Rockwellautomation Isagraf Workbench, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-2465, published 2022-08-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-1118, published 2022-05-17. High severity, CVSS 7.8. EPSS: 11.1% chance of exploitation in the next 30 days. Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers)) do not limit the…
CVE-2022-2463, published 2022-08-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the…
CVE-2022-2465, published 2022-08-25. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be…
CVE-2022-2464, published 2022-08-25. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system…