Vulnerability · Published Mar 23, 2022 · Assigned by icscert

CVE-2021-27475Rockwell Automation Connected Components Workbench Deserialization of Untrusted Data

High 8.6

In plain English

A high-severity unsafe deserialization in Connected Components Workbench from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.0% (higher than 87% of all known vulnerabilities).

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)3.0%top 12.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.

Affected products (as reported)

Vendor	Product	Versions
Rockwell Automation	Connected Components Workbench	unspecified – through v12.00.00

Weakness: CWE-502 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01 x_refsource_CONFIRM
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435 x_refsource_CONFIRM