Rockwellautomation Safety Instrumented Systems Workstation vulnerabilities

2 CVEs affecting Rockwellautomation Safety Instrumented Systems Workstation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-1118, published 2022-05-17.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-1118, published 2022-05-17. High severity, CVSS 7.8. EPSS: 11.1% chance of exploitation in the next 30 days. Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers)) do not limit the…
• CVE-2022-1018, published 2022-04-01. Medium severity, CVSS 5.5. EPSS: 2.2% chance of exploitation in the next 30 days. When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker…