Uncontrolled search path in Rockwell Automation Connected Components Workbench
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-427.
Summary
A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVESE, and 9328-CCWDEVPTE; and Connected Components Workbench - Free Standard Edition (All Supported Languages), v9.01.00 and earlier. Certain DLLs included with versions of CCW software can be potentially hijacked to allow an attacker to gain rights to a victim's affected personal computer. Such access rights can be at the same or potentially higher level of privileges as the compromised user account, including and up to computer administrator privileges.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Rockwell Automation Connected Components Workbench | Rockwell Automation Connected Components Workbench | — | No fix listed | CNA |
- Rockwell Automation Connected Components Workbench Vendor— Affected Rockwell Automation Connected Components Workbench Fixed in — No fix listed CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:developer:*:*:* | up to 9.01.00 | Vulnerable | Rockwell |
| cpe:2.3:h:rockwellautomation:9328-ccwdevdee:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:h:rockwellautomation:9328-ccwdevene:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:h:rockwellautomation:9328-ccwdevese:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:h:rockwellautomation:9328-ccwdevfre:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:h:rockwellautomation:9328-ccwdevite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:h:rockwellautomation:9328-ccwdevpte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:h:rockwellautomation:9328-ccwdevzhe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
| cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:free_standard:*:*:* | up to 9.01.00 | Vulnerable | Rockwell |
- cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:developer:*:*:* Versions up to 9.01.00 Vulnerable ·Rockwell
- cpe:2.3:h:rockwellautomation:9328-ccwdevdee:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:h:rockwellautomation:9328-ccwdevene:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:h:rockwellautomation:9328-ccwdevese:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:h:rockwellautomation:9328-ccwdevfre:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:h:rockwellautomation:9328-ccwdevite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:h:rockwellautomation:9328-ccwdevpte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:h:rockwellautomation:9328-ccwdevzhe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
- cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:free_standard:*:*:* Versions up to 9.01.00 Vulnerable ·Rockwell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-5176
- 2026-10-03 Alias added: GHSA-cjwf-2ph9-3jpr
References
More Rockwell Connected Components Workbench vulnerabilities
- TI-2014-04423 Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote… CVSS 2.0HIGH 7.5
- TI-2021-08961 Rockwell Automation Connected Components Workbench Deserialization of Untrusted Data CVSS 3.1HIGH 8.6
- TI-2021-08957 Rockwell Automation Connected Components Workbench Path Traversal CVSS 3.1HIGH 8.6
- TI-2021-08959 Rockwell Automation Connected Components Workbench Improper Input Validation CVSS 3.1HIGH 8.2
- TI-2022-00916 ICSA-22-088-01 Rockwell Automation ISaGRAF CVSS 3.1MEDIUM 5.5
Sources
- CVE-2017-5176 · CVE Program
- CVE-2017-5176 · NVD
- FIRST EPSS
- GHSA-cjwf-2ph9-3jpr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences