PT-2022-3927 · Rockwell Automation · Isagraf Workbench

Mashav Sapir · Published 2022-07-21 · Updated 2022-08-27 · CVE-2022-2465

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation ISaGRAF Workbench versions 6.0 through 6.6.9

Description The issue is related to the deserialization of untrusted data, where the ISaGRAF Workbench software does not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. The exploitation of this issue requires user interaction.

Recommendations For versions 6.0 through 6.6.9, consider disabling the deserialization of untrusted data as a temporary workaround until a patch is available. Restrict access to potentially malicious serialized objects to minimize the risk of exploitation. Avoid opening unknown or untrusted files in ISaGRAF Workbench to prevent potential remote code execution.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2022-04754

CVE-2022-2465

Affected Products

Isagraf Workbench

References · 5

• https://cisa.gov/uscert/ics/advisories/icsa-22-202-03 · Patch
• https://osv.dev/vulnerability/CVE-2022-2465 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04754 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-2465 · Security Note
• https://t.me/cibsecurity/48807 · Telegram Post