Is CVE-2022-2464 actively exploited?

No active exploitation of CVE-2022-2464 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-2464 be exploited remotely?

No. CVE-2022-2464 requires local access to exploit.

What is the CVSS score of CVE-2022-2464?

CVE-2022-2464 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2022-2464

HIGH

CVE-2022-2464

CWE-22Published: August 25, 2022· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful.

NVD Source

Technical Analysis

CVE-2022-2464 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.