Rockwell Automation Connected Components Workbench
3 CVEs affecting Rockwell Automation Connected Components Workbench. Latest disclosed: 2022-03-23. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27475 | High | 8.6 | 2022-03-23 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers… |
CVE-2021-27471 | High | 7.7 | 2022-03-23 | The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files… |
CVE-2021-27473 | Medium | 6.1 | 2022-03-23 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccwarc archive file during extraction. Thi… |