Rockwell Automation CCW DLL Hijacking Vulnerability (CWE-427) Advisory

Critical Vulnerability Information Vulnerability Overview Product: Rockwell Automation Connected Components Workbench (CCW) Version: Versions up to and including v9.01.00 Vulnerability Type: DLL Hijacking (CWE-427) CVSSv3 Score: 7.0 Impact Successful exploitation of this vulnerability could lead to denial of service (DoS) or injection of malicious code into trusted processes, depending on the content of the DLL and the victim's mitigation measures. Mitigation Rockwell Automation has released updated versions of CCW, including version 10.00 and version 10.01 (available in all languages), which address the confirmed vulnerability. Users are recommended to upgrade to the latest version of Connected Components Workbench, version 10.00 or higher, available at the following link: Download link ICS-CERT advises users to implement defensive measures to reduce the risk of exploitation, including: Minimizing network exposure of all control systems, ensuring they are not accessible from the internet. Placing control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use secure methods such as virtual private networks (VPNs), while being aware that VPNs may have vulnerabilities and should be updated to the latest versions. Recognize that a VPN is only as secure as the security level of the devices it connects to. Before deploying defensive measures, organizations should conduct appropriate impact analysis and risk assessments. Vulnerability Overview Certain DLLs within the software may be hijacked, allowing attackers to gain higher levels of privilege on the affected computer.

Goal Reached Thanks to every supporter — we hit 100%!

Rockwell Automation CCW DLL Hijacking Vulnerability (CWE-427) Advisory