Vulnerability in Rockwellautomation Integrated Architecture Builder
CVE-2016-2277
IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file.
EPSS: 0.009 (56.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Rockwellautomation Integrated_architecture_builder — versions 9.7.0.0, 9.7.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2016-2277?
- CVE-2016-2277 is a medium-severity vulnerability in Rockwellautomation Integrated Architecture Builder, classified under Improper Access Control. CVSS score: 6.3/10. Published 2016-04-06.
- How severe is CVE-2016-2277?
- Medium severity. CVSS v3 base score is 6.3 out of 10.