Is CVE-2022-2463 actively exploited?

No active exploitation of CVE-2022-2463 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-2463 be exploited remotely?

No. CVE-2022-2463 requires local access to exploit.

What is the CVSS score of CVE-2022-2463?

CVE-2022-2463 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2022-2463

HIGH

CVE-2022-2463

CWE-22Published: August 25, 2022· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the software is running at the SYSTEM level, then the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.

NVD Source

Technical Analysis

CVE-2022-2463 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.