Vulnerability record · CVE-2021-27471 · published 23 March 2022
CVE-2021-27471: Rockwellautomation connected components workbench path traversal vulnerability
Rockwellautomation · Connected Components Workbench
The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Rockwell Automation Connected Components Workbench v12.00.00 and prior, can traverse the file system. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the Connected Components Workbench software. User interaction is required for this exploit to be successful.
Description
The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Rockwell Automation Connected Components Workbench v12.00.00 and prior, can traverse the file system. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the Connected Components Workbench software. User interaction is required for this exploit to be successful.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435 | Permissions RequiredVendor Advisory |
| https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01 | Third Party AdvisoryUS Government Resource |
| https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435 | Permissions RequiredVendor Advisory |
| https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01 | Third Party AdvisoryUS Government Resource |
Track CVE-2021-27471 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2021-27471), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
