CVE-2022-1118

Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers)) do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in arbitrary code execution. This vulnerability requires user interaction to be successfully exploited

CVSS v3 8.6 HIGH
CVSS v2.0 6.8 MEDIUM

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-01	Third Party Advisory US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-01	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:rockwellautomation:connected_component_workbench::::::::
	cpe:2.3:a:rockwellautomation:isagraf_workbench::::::::
	cpe:2.3:a:rockwellautomation:safety_instrumented_systems_workstation::::::::

History

21 Nov 2024, 06:40

Type	Values Removed	Values Added
References	~~() https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-01 - Third Party Advisory, US Government Resource~~	() https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-01 - Third Party Advisory, US Government Resource
CVSS	v2 : ~~6.8~~ v3 : ~~7.8~~	v2 : 6.8 v3 : 8.6

Information

Published : 2022-05-17 20:15

Updated : 2024-11-21 06:40

NVD link : CVE-2022-1118

Mitre link : CVE-2022-1118

CVE.ORG link : CVE-2022-1118

JSON object : View

Products Affected

rockwellautomation

connected_component_workbench
isagraf_workbench
safety_instrumented_systems_workstation

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2022-1118", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-05-17T20:15:08.173", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers)) do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in arbitrary code execution. This vulnerability requires user interaction to be successfully exploited"}, {"lang": "es", "value": "Connected Components Workbench (versiones v13.00.00 y anteriores), ISaGRAF Workbench (versiones v6.0 hasta v6.6.9), y Safety Instrumented System Workstation (versiones v1.2 y anteriores (para Trusted Controllers)) no limitan los objetos que pueden ser deserializados. Esto permite a atacantes dise\u00f1ar un objeto serializado malicioso que, si es abierto por un usuario local en Connected Components Workbench, puede resultar en una ejecuci\u00f3n de c\u00f3digo arbitrario. Esta vulnerabilidad requiere la interacci\u00f3n del usuario para ser explotada con \u00e9xito"}], "lastModified": "2024-11-21T06:40:05.017", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rockwellautomation:connected_component_workbench:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68034639-8E86-45CE-97EA-AAC8EAEE6600", "versionEndIncluding": "13.00.00"}, {"criteria": "cpe:2.3:a:rockwellautomation:isagraf_workbench:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54E95041-485F-48A3-A3C3-AA59F74EF64E", "versionEndIncluding": "6.6.9", "versionStartIncluding": "6.0"}, {"criteria": "cpe:2.3:a:rockwellautomation:safety_instrumented_systems_workstation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CDC3A7A-94B0-4B10-B478-C8C9E1FAD73C", "versionEndIncluding": "1.2"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}