Rockwell Automation ISaGRAF Workbench

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-24656.0 – 6.6.9ISaGRAF Workbench Deserialization of Untrusted Data CWE-502HIGH 8.60.3 %
CVE-2022-24646.0 – 6.6.9ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22HIGH 7.80.3 %
CVE-2022-24636.0 – 6.6.9ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22HIGH 7.82.8 %
CVE-2022-1118All v6.0 through v6.6.9Rockwell Automation ISaGRAF Deserialization of Untrusted DataHIGH 8.611 %