| Package | Affected versions | Patched versions |
|---|---|---|
| aadvance controller | ≤ 1.40 | |
| isagraf free runtime | ≤ 6.6.8 | |
| isagraf runtime | ≥ 5.0, < 6.0 | 6.0 |
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free