CVE-2014-5424: High severity rockwell automation connected components workbench vulnerability
Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an invalid property value to an ActiveX control that was built with an outdated compiler.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5424?
CVE-2014-5424 is classified as a high-severity vulnerability due to its potential for remote denial of service and arbitrary code execution.
How do I fix CVE-2014-5424?
To mitigate CVE-2014-5424, upgrade Connected Components Workbench to version 7.00.00 or later.
Who is affected by CVE-2014-5424?
CVE-2014-5424 affects all versions of Rockwell Automation Connected Components Workbench prior to 7.00.00.
What type of vulnerability is CVE-2014-5424?
CVE-2014-5424 is a vulnerability that allows for denial of service and potential arbitrary code execution due to improper handling of ActiveX control properties.
Can CVE-2014-5424 be exploited remotely?
Yes, CVE-2014-5424 can be exploited remotely by attackers to crash the application or execute arbitrary code.