Beveiligingsadvies

CVE-2021-27475

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-23 19:46:38
Laatst bijgewerkt 2025-04-16 17:58:45
Toegewezen door icscert
CVSS-score 8.6
Status PUBLISHED

Beschrijving

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.