A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW).

Published 9 y ago 2017-05-19 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.0

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.5%

percentile 44%

Public exploits

none known

A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVESE, and 9328-CCWDEVPTE; and Connected Components Workbench - Free Standard Edition (All Supported Languages), v9.01.00 and earlier. Certain DLLs included with versions of CCW software can be potentially hijacked to allow an attacker to gain rights to a victim's affected personal computer. Such access rights can be at the same or potentially higher level of privileges as the compromised user account, including and up to computer administrator privileges.

Exploit prediction (EPSS)

0.52% probability of exploitation in the next 30 days, higher than 44% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	7.0	`CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H`
NVD	2.0	6.2	`AV:L/AC:H/Au:N/C:C/I:C/A:C`

Affected products

n/a Rockwell Automation Connected Components Workbench

Classification

Weakness

CWE-427 Uncontrolled Search Path Element

References

securityfocus.com /bid/97000 · vdb-entry, x_refsource_BID, x_transferred
ics-cert.us-cert.gov /advisories/ICSA-17-047-01 · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2017-5176
NVD: CVE-2017-5176

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.