CVE-2022-1118

🗓️ 17 May 2022 19:47:10Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 113 Views

Vulnerability in Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 through v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior) allows arbitrary code execution via crafted serialized object (CVE-2022-1118)

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerabilities of the software for designing and configuring controllers from the CCW platform, the SISW workstation for automated safety systems, and the ISaGRAF Workbench development environment for programmable logic controllers from Rockwell Automation allow attackers to execute arbitrary code by restoring unreliable data into memory.	20 Apr 202200:00	–	bdu_fstec
Circl	CVE-2022-1118	18 May 202200:28	–	circl
CNNVD	Rockwell Automation Connected Components Workbench 代码问题漏洞	5 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-1118 Rockwell Automation ISaGRAF Deserialization of Untrusted Data	17 May 202219:47	–	cvelist
ICS	Rockwell Automation ISaGRAF	5 Apr 202200:00	–	ics
NVD	CVE-2022-1118	17 May 202220:15	–	nvd
OSV	CVE-2022-1118	17 May 202220:15	–	osv
Prion	Remote code execution	17 May 202220:15	–	prion
RedhatCVE	CVE-2022-1118	5 Feb 202522:59	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2022-1118	2 May 202300:00	–	vulncheck_kev

NVD

Vulners

Node

rockwellautomation connected_component_workbenchRange≤13.00.00

rockwellautomation isagraf_workbenchRange6.0–6.6.9

rockwellautomation safety_instrumented_systems_workstationRange≤1.2

[
  {
    "product": "Connected Component Workbench",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "v13.00.00",
        "status": "affected",
        "version": "All ",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ISaGRAF Workbench",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "All v6.0 through v6.6.9"
      }
    ]
  },
  {
    "product": "Safety Instrumented Systems Workstation",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "v1.2 (for Trusted Controllers)",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]