rockwellautomation Vulnerability Advisory Catalog

Total 327 security vulnerabilities recorded for rockwellautomation software and firmware.

← Back to All Vendors
Component: thinmanager_thinserver

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the ...

๐Ÿ“… 2023-08-17
CVSS 7.5 Dossier →
Component: armor_powerflex_firmware

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat...

๐Ÿ“… 2023-08-08
CVSS 8.6 Dossier →
Component: thinmanager

An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This featur...

๐Ÿ“… 2023-07-18
CVSS 7.5 Dossier →
Component: kinetix_5700_firmware

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. ย The new ENIP connections cannot be established if im...

๐Ÿ“… 2023-07-18
CVSS 7.5 Dossier →
Component: 1756-en4tr_firmware

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a d...

๐Ÿ“… 2023-07-12
CVSS 7.5 Dossier →
CVE-2023-3595 CRITICAL
Component: 1756-en2f_series_a_firmware

Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious us...

๐Ÿ“… 2023-07-12
CVSS 9.8 Dossier →
CVE-2023-2746 CRITICAL
Component: enhanced_him

The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-...

๐Ÿ“… 2023-07-11
CVSS 9.6 Dossier →
Component: powermonitor_1000_firmware

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. ย The vulnerable pag...

๐Ÿ“… 2023-07-11
CVSS 8.8 Dossier →
Component: factorytalk_transaction_manager

A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a mod...

๐Ÿ“… 2023-06-13
CVSS 7.5 Dossier →
CVE-2023-2639 MEDIUM
Component: factorytalk_policy_manager

The underlying feedback mechanism of Rockwell Automation'sย FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to releva...

๐Ÿ“… 2023-06-13
CVSS 4.1 Dossier →
CVE-2023-2638 MEDIUM
Component: factorytalk_policy_manager

Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. ย  Improper authorizati...

๐Ÿ“… 2023-06-13
CVSS 5.9 Dossier →
Component: factorytalk_policy_manager

Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies.ย  Hard-coded cryptographic ke...

๐Ÿ“… 2023-06-13
CVSS 7.3 Dossier →
Component: factorytalk_vantagepoint

A cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk Vantagepoint. This vulnerability can be exploited in two ways....

๐Ÿ“… 2023-05-11
CVSS 7.1 Dossier →
Component: thinmanager

Rockwell Automation ThinManager product allows the use of medium strength ciphers. ย If the client requests an insecure cipher, a malicious actor coul...

๐Ÿ“… 2023-05-11
CVSS 7.5 Dossier →
CVE-2023-1834 CRITICAL
Component: kinetix_5500_firmware

Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telne...

๐Ÿ“… 2023-05-11
CVSS 9.4 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to v...

๐Ÿ“… 2023-05-11
CVSS 7.0 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to v...

๐Ÿ“… 2023-05-11
CVSS 7.0 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user wi...

๐Ÿ“… 2023-05-11
CVSS 4.7 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user wi...

๐Ÿ“… 2023-05-11
CVSS 4.7 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user wi...

๐Ÿ“… 2023-05-11
CVSS 4.7 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user wi...

๐Ÿ“… 2023-05-11
CVSS 4.7 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user wi...

๐Ÿ“… 2023-05-11
CVSS 4.7 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discove...

๐Ÿ“… 2023-05-11
CVSS 5.5 Dossier →
Component: armorstart_st_284ee_firmware

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to v...

๐Ÿ“… 2023-05-11
CVSS 7.0 Dossier →
Page 6 of 14 (327 Total Records)