[Control systems] Rockwell Automation security advisory (AV22-156)

Number: AV22-156
Date: 29 March 2022

On 29 March 2022 ICS-CERT published an ICS Advisory to highlight a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

• Connected Component Workbench – version v12.00 and prior
• ISaGRAF Workbench – version v6.6.9 and prior
• Safety Instrumented Systems Workstation – version v1.1 and prior

Exploitation of this vulnerability could result in information disclosure.

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

ICS Advisory (ICSA-22-088-01)