Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

rockwellautomation compactlogix firmware - vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2016-2279

Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* prior to 28.011+ allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Rockwellautomation Compactlogix 1769-l16er-bb1b FirmwareRockwellautomation Compactlogix 1769-l18er-bb1b FirmwareRockwellautomation Compactlogix 1769-l18erm-bb1b FirmwareRockwellautomation Compactlogix 1769-l24er-qb1b FirmwareRockwellautomation Compactlogix 1769-l24er-qbfc1b FirmwareRockwellautomation Compactlogix 1769-l27erm-qbfc1b FirmwareRockwellautomation Compactlogix 1769-l30er FirmwareRockwellautomation Compactlogix 1769-l30erm FirmwareRockwellautomation Compactlogix 1769-l30er-nse FirmwareRockwellautomation Compactlogix 1769-l33er FirmwareRockwellautomation Compactlogix 1769-l33erm FirmwareRockwellautomation Compactlogix 1769-l36erm FirmwareRockwellautomation Compactlogix 1769-l23e-qb1b FirmwareRockwellautomation Compactlogix 1769-l23e-qbfc1b FirmwareRockwellautomation Compactlogix 1756-en2f Series A FirmwareRockwellautomation Compactlogix 1756-en2f Series B FirmwareRockwellautomation Compactlogix 1756-en2t Series A FirmwareRockwellautomation Compactlogix 1756-en2t Series B FirmwareRockwellautomation Compactlogix 1756-en2t Series C FirmwareRockwellautomation Compactlogix 1756-en2t Series D FirmwareRockwellautomation Compactlogix 1756-en2tr Series A FirmwareRockwellautomation Compactlogix 1756-en2tr Series B Firmware
7.5
CVSSv2

CVE-2022-1161

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an ...
Rockwellautomation Compactlogix 1768-l43 FirmwareRockwellautomation Compactlogix 1768-l45 FirmwareRockwellautomation Compactlogix 1769-l31 FirmwareRockwellautomation Compactlogix 1769-l32c FirmwareRockwellautomation Compactlogix 1769-l32e FirmwareRockwellautomation Compactlogix 1769-l35cr FirmwareRockwellautomation Compactlogix 1769-l35e FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5380 FirmwareRockwellautomation Compactlogix 5480 FirmwareRockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Compact Guardlogix 5380 FirmwareRockwellautomation Controllogix 5550 FirmwareRockwellautomation Controllogix 5560 FirmwareRockwellautomation Controllogix 5570 FirmwareRockwellautomation Controllogix 5580 FirmwareRockwellautomation Guardlogix 5560 FirmwareRockwellautomation Guardlogix 5570 FirmwareRockwellautomation Guardlogix 5580 FirmwareRockwellautomation Flexlogix 1794-l34 Firmware
NA

CVE-2022-3752

An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavai...
Rockwellautomation Compactlogix 5480 FirmwareRockwellautomation Compactlogix 5580 FirmwareRockwellautomation Guardlogix 5580 FirmwareRockwellautomation Compact Guardlogix 5380 FirmwareRockwellautomation Compactlogix 5380 Firmware
7.5
CVSSv2

CVE-2019-10952

An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact Gu...
Rockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Armor Compact Guardlogix 5370 Firmware
7.8
CVSSv2

CVE-2019-10954

An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Cont...
Rockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Armor Compact Guardlogix 5370 Firmware
5.8
CVSSv2

CVE-2019-10955

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and previous versions, MicroLogix 1100 Controllers v14.00 and previous versions, CompactLogix 5370 L1 controllers v30.014 and previous versions, CompactLogix 5370 L2 controllers v30.014 an...
Rockwellautomation Micrologix 1400 A FirmwareRockwellautomation Micrologix 1400 B FirmwareRockwellautomation Micrologix 1100 FirmwareRockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 Firmware
7.8
CVSSv2

CVE-2022-1797

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fa...
Rockwellautomation Compactlogix 5380 FirmwareRockwellautomation Compact Guardlogix 5380 FirmwareRockwellautomation Compactlogix 5480 FirmwareRockwellautomation Controllogix 5580 FirmwareRockwellautomation Guardlogix 5580 FirmwareRockwellautomation Compactlogix 5370 FirmwareRockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Controllogix 5570 FirmwareRockwellautomation Guardlogix 5570 Firmware
7.5
CVSSv2

CVE-2016-9343

An issue exists in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 up to and including 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be a...
Rockwellautomation Softlogix 5800 Controller Firmware 18.00Rockwellautomation Softlogix 5800 Controller Firmware 19.00Rockwellautomation Softlogix 5800 Controller Firmware 20.00Rockwellautomation Softlogix 5800 Controller Firmware 21.00Rockwellautomation Rslogix Emulate 5000 Firmware 18.00Rockwellautomation Rslogix Emulate 5000 Firmware 19.00Rockwellautomation Rslogix Emulate 5000 Firmware 20.00Rockwellautomation Rslogix Emulate 5000 Firmware 21.00Rockwellautomation Guardlogix 5570 Controller Firmware 16.00Rockwellautomation Guardlogix 5570 Controller Firmware 17.00Rockwellautomation Guardlogix 5570 Controller Firmware 18.00Rockwellautomation Guardlogix 5570 Controller Firmware 19.00Rockwellautomation Guardlogix 5570 Controller Firmware 20.00Rockwellautomation Guardlogix 5570 Controller Firmware 20.010Rockwellautomation Guardlogix 5570 Controller Firmware 20.017Rockwellautomation Guardlogix 5570 Controller Firmware 21.00Rockwellautomation Flexlogix L34 Controller Firmware 16.00Rockwellautomation Controllogix L55 Controller Firmware 16.00Rockwellautomation Controllogix L55 Controller Firmware 16.020Rockwellautomation Controllogix L55 Controller Firmware 16.022Rockwellautomation Controllogix 5570 Redundant Controller Firmware 20.00Rockwellautomation Controllogix 5570 Redundant Controller Firmware 20.050
6.5
CVSSv2

CVE-2022-1159

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.
Rockwellautomation Controllogix 5580 FirmwareRockwellautomation Guardlogix 5580 FirmwareRockwellautomation Compactlogix 5380 FirmwareRockwellautomation Compactlogix 5480 FirmwareRockwellautomation Compact Guardlogix 5380 Firmware
NA

CVE-2020-6998

The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an malicious user to send specially crafted ...
Rockwellautomation Armor Compact Guardlogix 5370 FirmwareRockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Controllogix 5570 FirmwareRockwellautomation Guardlogix 5560 FirmwareRockwellautomation Guardlogix 5570 FirmwareRockwellautomation Guardlogix 5580 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook