rockwellautomation Vulnerability Advisory Catalog

Total 327 security vulnerabilities recorded for rockwellautomation software and firmware.

← Back to All Vendors
Component: factorytalk_batch_view

CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across ...

📅 2024-09-12
CVSS 8.1 Dossier →
CVE-2024-45824 CRITICAL
Component: factorytalk_view

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Comma...

📅 2024-09-12
CVSS 9.8 Dossier →
CVE-2024-7988 CRITICAL
Component: thinmanager_thinserver

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code ...

📅 2024-08-26
CVSS 9.8 Dossier →
Component: thinmanager_thinserver

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code ...

📅 2024-08-26
CVSS 7.8 Dossier →
Component: thinmanager

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor...

📅 2024-08-23
CVSS 7.5 Dossier →
Component: compactlogix_5380_firmware

CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecove...

📅 2024-08-14
CVSS 7.5 Dossier →
Component: factorytalk_view

CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions...

📅 2024-08-14
CVSS 8.8 Dossier →
CVE-2024-7507 MEDIUM
Component: compactlogix_5380_firmware

CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is r...

📅 2024-08-14
CVSS 6.5 Dossier →
Component: pavilion8

CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in...

📅 2024-08-14
CVSS 7.5 Dossier →
Component: controllogix_5580_firmware

CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent...

📅 2024-08-14
CVSS 7.5 Dossier →
CVE-2024-6326 MEDIUM
Component: factorytalk_policy_manager

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this ...

📅 2024-07-16
CVSS 5.5 Dossier →
CVE-2024-6325 MEDIUM
Component: factorytalk_policy_manager

The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-adv...

📅 2024-07-16
CVSS 6.5 Dossier →
Component: 5015-aenftxt_firmware

An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapte...

📅 2024-07-16
CVSS 7.5 Dossier →
Component: pavilion8

A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privileges to access functions whic...

📅 2024-07-16
CVSS 8.8 Dossier →
Component: thinmanager

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinS...

📅 2024-06-25
CVSS 7.5 Dossier →
CVE-2024-5989 CRITICAL
Component: thinmanager

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a...

📅 2024-06-25
CVSS 9.8 Dossier →
CVE-2024-5988 CRITICAL
Component: thinmanager

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a r...

📅 2024-06-25
CVSS 9.8 Dossier →
CVE-2024-5659 MEDIUM
Component: controllogix_5580_firmware

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fau...

📅 2024-06-14
CVSS 6.5 Dossier →
Component: factorytalk_view

A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Co...

📅 2024-06-14
CVSS 8.8 Dossier →
Component: factorytalk_view

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with ...

📅 2024-06-14
CVSS 7.5 Dossier →
Component: factorytalk_view

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system w...

📅 2024-06-14
CVSS 7.5 Dossier →
CVE-2024-4609 CRITICAL
Component: factorytalk_view

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL stat...

📅 2024-05-16
CVSS 9.8 Dossier →
Component: controllogix_5580_firmware

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause ...

📅 2024-04-15
CVSS 8.6 Dossier →
Component: 5015-aenftxt_firmware

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverabl...

📅 2024-04-15
CVSS 7.5 Dossier →
Page 4 of 14 (327 Total Records)