rockwellautomation Vulnerability Advisory Catalog

Total 327 security vulnerabilities recorded for rockwellautomation software and firmware.

← Back to All Vendors
Component: thinmanager

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authentica...

📅 2025-09-09
CVSS 8.8 Dossier →
CVE-2025-8008 MEDIUM
Component: 1756-en2tr_series_a_firmware

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause...

📅 2025-09-09
CVSS 6.5 Dossier →
CVE-2025-8007 MEDIUM
Component: 1756-en2tr_series_a_firmware

A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigg...

📅 2025-09-09
CVSS 6.5 Dossier →
Component: factorytalk_activation_manager

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attacke...

📅 2025-09-09
CVSS 7.5 Dossier →
CVE-2025-7972 CRITICAL
Component: factorytalk_linx

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable ...

📅 2025-08-14
CVSS 9.1 Dossier →
Component: arena

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of m...

📅 2025-08-05
CVSS 7.8 Dossier →
Component: arena

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of m...

📅 2025-08-05
CVSS 7.8 Dossier →
Component: arena

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of m...

📅 2025-08-05
CVSS 7.8 Dossier →
Component: arena

A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the bo...

📅 2025-07-09
CVSS 7.8 Dossier →
Component: arena

A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the bo...

📅 2025-07-09
CVSS 7.8 Dossier →
CVE-2025-3618 MEDIUM
Component: thinmanager

A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocat...

📅 2025-04-15
CVSS 5.5 Dossier →
Component: thinmanager

A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary fo...

📅 2025-04-15
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of impro...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of impro...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memor...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memor...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memor...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validat...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validat...

📅 2025-04-08
CVSS 7.8 Dossier →
Component: arena

A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validat...

📅 2025-04-08
CVSS 7.8 Dossier →
CVE-2025-0498 CRITICAL
Component: factorytalk_assetcentre

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due...

📅 2025-01-30
CVSS 9.8 Dossier →
Page 2 of 14 (327 Total Records)