CVE-2014-5424

High

Published: 14/11/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Rockwell Automation Connected Components Workbench (CCW) versions before 7.00.00 are vulnerable to remote attacks that can lead to application crashes or potentially execute arbitrary code via an invalid property value to an ActiveX control built with an outdated compiler.

Risk Assessment

Attackers can remotely cause application crashes or gain system access, which may lead to serious security implications for the organization.

Recommendation

It is recommended to update Connected Components Workbench to version 7.00.00 or later to mitigate this vulnerability.

Other vulnerabilities in Rockwell Automation Connected Components Workbench (CCW)

CVE-2017-5176High
A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The affected versions include Developer Edition v9.01.00 and earlier, as well as Free Standard Edition v9.01.00 and earlier.

Original NVD description (English source)

Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an invalid property value to an ActiveX control that was built with an outdated compiler.