CVE-2022-2464
HIGHRockwell Automation ISaGRAF Workbench 6.0-6.6.9 - Path Traversal via Crafted Malicious Files
Title source: llmDescription
Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful.
References (1)
Core 1
Core References
Mitigation, Patch, Third Party Advisory, US Government Resource x_refsource_misc
https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03
Scores
CVSS v3
7.7
EPSS
0.0003
EPSS Percentile
8.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-22
Status
published
Products (1)
rockwellautomation/isagraf_workbench
6.0 - 6.6.9
Published
Aug 25, 2022
Tracked Since
Feb 18, 2026