Описание
Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.
Ссылки
- Permissions RequiredVendor Advisory
- Third Party AdvisoryUS Government Resource
- Permissions RequiredVendor Advisory
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
EPSS
8.6 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.
Уязвимость программного обеспечения проектирования и настройки контроллеров Connected Components Workbench (CCW) компании Rockwell Automation, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнить произвольный код
EPSS
8.6 High
CVSS3
6.8 Medium
CVSS2