CVE-2022-1018 - CVE House

Back to Database

Status published Medium CVE-2022-1018

ICSA-22-088-01 Rockwell Automation ISaGRAF

5.5 CVSS

Vulnerability Description

When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1018

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

kimiya of Trend Micro’s Zero Day Initiative reported this vulnerability to CISA.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-01

More from Rockwell Automation

View All →

ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

432ES-IG3 Series A Denial-of-Service Vulnerability

Affected Vendor

Rockwell Automation

View all reports →

Affected Software

Connected Component Workbench, ISaGRAF, Safety Instrumented Systems Workstation

Vulnerable Versions:

All

Timeline

Official Publish: April 1st, 2022

Last Modified: April 16th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1005 Data from Local System

T1040 Network Sniffing

T1105 Ingress Tool Transfer

Command and Control

T1499 Endpoint Denial of Service