Rockwellautomation Connected Components Workbench
6 CVEs affecting Rockwellautomation Connected Components Workbench. Latest disclosed: 2022-04-01. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27475 | High | 8.6 | 2022-03-23 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers… |
CVE-2021-27471 | High | 7.7 | 2022-03-23 | The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files… |
CVE-2017-5176 | High | 7.0 | 2017-05-19 | A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbe… |
CVE-2021-27473 | Medium | 6.1 | 2022-03-23 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccwarc archive file during extraction. Thi… |
CVE-2022-1018 | Medium | 5.5 | 2022-04-01 | When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within… |
CVE-2014-5424 | | 2014-11-14 | Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application crash) or possibly ex… |