Path Traversal in Rockwell Automation Isagraf Workbench
CVE-2022-2464
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.003 (18.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Patch, Third Party Advisory, x_refsource_MISC, Mitigation)
Frequently asked questions
- What is CVE-2022-2464?
- CVE-2022-2464 is a high-severity vulnerability in Rockwell Automation Isagraf Workbench, classified under Path Traversal. CVSS score: 7.7/10. Published 2022-08-25.
- How severe is CVE-2022-2464?
- High severity. CVSS v3 base score is 7.7 out of 10.