Rockwell Automation Connected Components Workbench

🗓️ 13 May 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 172 Views

Rockwell Automation Connected Components Workbench v12.00.00 and prior. Vulnerabilities: Deserialization of Untrusted Data, Path Traversal, Improper Input Validation. Successful exploitation may allow remote code execution, authentication bypass, or privilege escalation

Reporter	Title	Published	Views	Family All 29
BDU FSTEC	The vulnerability of the software used for designing and configuring the Connected Components Workbench (CCW) from Rockwell Automation arises from incorrect restrictions on the path to the restricted access catalog. This vulnerability allows attackers to escalate their privileges.	4 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for designing and configuring the Connected Components Workbench (CCW) from Rockwell Automation, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.	4 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for designing and configuring Connected Components Workbench controllers arises from incorrect restrictions on the path to the restricted-access directory. This allows attackers to escalate their privileges.	24 Aug 202200:00	–	bdu_fstec
CNNVD	Rockwell Automation Connected Components Workbench 路径遍历漏洞	13 May 202100:00	–	cnnvd
CNNVD	Rockwell Automation Connected Components Workbench 路径遍历漏洞	13 May 202100:00	–	cnnvd
CNNVD	Rockwell Automation Connected Components Workbench 代码问题漏洞	13 May 202100:00	–	cnnvd
CNVD	Rockwell Automation Connected Components Workbench Input Validation Error Vulnerability	14 May 202100:00	–	cnvd
CNVD	Rockwell Automation Connected Components Workbench Path Traversal Vulnerability	14 May 202100:00	–	cnvd
CNVD	Rockwell Automation Connected Components Workbench Deserialization Vulnerability	14 May 202100:00	–	cnvd
CVE	CVE-2021-27471	23 Mar 202219:46	–	cve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-133-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-133-01
us-cert	www.us-cert.cisa.gov/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

13 May 2021 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 26.9

CVSS 3.18.6

EPSS0.00205

SSVC