rockwellautomation Vulnerability Advisory Catalog

Total 327 security vulnerabilities recorded for rockwellautomation software and firmware.

← Back to All Vendors
Component: arena

A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized co...

📅 2024-03-26
CVSS 7.8 Dossier →
Component: arena

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundari...

📅 2024-03-26
CVSS 4.4 Dossier →
Component: arena

An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the...

📅 2024-03-26
CVSS 7.8 Dossier →
Component: arena

A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code t...

📅 2024-03-26
CVSS 7.8 Dossier →
Component: arena

A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert...

📅 2024-03-26
CVSS 7.8 Dossier →
Component: arena

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the softwa...

📅 2024-03-26
CVSS 7.8 Dossier →
Component: factorytalk_view

A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely wi...

📅 2024-03-25
CVSS 5.3 Dossier →
Component: powerflex_527_ac_drives_firmware

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data...

📅 2024-03-25
CVSS 7.5 Dossier →
Component: powerflex_527_ac_drives_firmware

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a di...

📅 2024-03-25
CVSS 7.5 Dossier →
Component: powerflex_527_ac_drives_firmware

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the ...

📅 2024-03-25
CVSS 7.5 Dossier →
CVE-2024-21915 CRITICAL
Component: factorytalk_services_platform

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic us...

📅 2024-02-16
CVSS 9.0 Dossier →
CVE-2024-21917 CRITICAL
Component: factorytalk_services_platform

A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for au...

📅 2024-01-31
CVSS 9.8 Dossier →
Component: controllogix_5570_controller_firmware

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could pot...

📅 2024-01-31
CVSS 8.6 Dossier →
Component: factorytalk_services_platform

Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTal...

📅 2023-10-27
CVSS 8.1 Dossier →
Component: factorytalk_view

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious ...

📅 2023-10-27
CVSS 7.5 Dossier →
Component: arena

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unaut...

📅 2023-10-27
CVSS 7.8 Dossier →
Component: arena

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to co...

📅 2023-10-27
CVSS 7.8 Dossier →
CVE-2023-20198 CRITICAL
Component: allen-bradley_stratix_5200_firmware

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating ...

📅 2023-10-16
CVSS 10.0 Dossier →
Component: factorytalk_linx

FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious pa...

📅 2023-10-13
CVSS 8.2 Dossier →
CVE-2023-2262 CRITICAL
Component: 1756-en2t_series_a_firmware

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potenti...

📅 2023-09-20
CVSS 9.8 Dossier →
Component: pavilion8

The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicio...

📅 2023-09-12
CVSS 8.8 Dossier →
CVE-2023-2071 CRITICAL
Component: factorytalk_view

Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker t...

📅 2023-09-12
CVSS 9.8 Dossier →
CVE-2023-2917 CRITICAL
Component: thinmanager_thinserver

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.  Due to an improper input validation, a path...

📅 2023-08-17
CVSS 9.8 Dossier →
Component: thinmanager_thinserver

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path tra...

📅 2023-08-17
CVSS 7.5 Dossier →
Page 5 of 14 (327 Total Records)