March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – NJRAT – Active IOCs
March 31, 2022
Rewterz Threat Alert – ICS: Multiple Hitachi Energy LinkOne WebView Vulnerabilities
March 31, 2022
Rewterz Threat Alert – NJRAT – Active IOCs
March 31, 2022
Rewterz Threat Alert – ICS: Multiple Hitachi Energy LinkOne WebView Vulnerabilities
March 31, 2022
Severity
Medium
Analysis Summary
CVE-2022-1018
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
Impact
- Confidentiality Loss
Affected Vendors
- Rockwell Automation
Affected Products
- Connected Component Workbench: v12.00 and prior
- ISaGRAF Workbench: v6.6.9 and prior
- Safety Instrumented Systems Workstation: v1.1 and prior
Remediation
Refer to the vendor website for the mitigations and patch updates here.