CVE-2022-2463

7.8 highEPSS 2.8%

High (7.8) in rockwellautomation isagraf workbench. EPSS 2.8% chance of exploitation in the next 30 days.

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the software is running at the SYSTEM level, then the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2022-08-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rockwellautomation:isagraf_workbench

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03
https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03

Check your stack JSON