Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
rockwellautomation vulnerabilities and exploits
(subscribe to this query)
10
CVSSv3
CVE-2020-14516
In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.
Rockwellautomation Factorytalk Services Platform 6.10.00
Rockwellautomation Factorytalk Services Platform 6.11.00
10
CVSSv3
CVE-2017-16740
A Buffer Overflow issue exists in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and previous versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
Rockwellautomation 1766-l32bxba Firmware
Rockwellautomation 1766-l32awa Firmware
Rockwellautomation 1766-l32bxb Firmware
Rockwellautomation 1766-l32bwaa Firmware
Rockwellautomation 1766-l32awaa Firmware
Rockwellautomation 1766-l32bwa Firmware
10
CVSSv3
CVE-2016-9343
An issue exists in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 up to and including 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be a...
Rockwellautomation Softlogix 5800 Controller Firmware 18.00
Rockwellautomation Softlogix 5800 Controller Firmware 19.00
Rockwellautomation Softlogix 5800 Controller Firmware 20.00
Rockwellautomation Softlogix 5800 Controller Firmware 21.00
Rockwellautomation Rslogix Emulate 5000 Firmware 18.00
Rockwellautomation Rslogix Emulate 5000 Firmware 19.00
Rockwellautomation Rslogix Emulate 5000 Firmware 20.00
Rockwellautomation Rslogix Emulate 5000 Firmware 21.00
Rockwellautomation Guardlogix 5570 Controller Firmware 16.00
Rockwellautomation Guardlogix 5570 Controller Firmware 17.00
Rockwellautomation Guardlogix 5570 Controller Firmware 18.00
Rockwellautomation Guardlogix 5570 Controller Firmware 19.00
Rockwellautomation Guardlogix 5570 Controller Firmware 20.00
Rockwellautomation Guardlogix 5570 Controller Firmware 20.010
Rockwellautomation Guardlogix 5570 Controller Firmware 20.017
Rockwellautomation Guardlogix 5570 Controller Firmware 21.00
Rockwellautomation Flexlogix L34 Controller Firmware 16.00
Rockwellautomation Controllogix L55 Controller Firmware 16.00
Rockwellautomation Controllogix L55 Controller Firmware 16.020
Rockwellautomation Controllogix L55 Controller Firmware 16.022
Rockwellautomation Controllogix 5570 Redundant Controller Firmware 20.00
Rockwellautomation Controllogix 5570 Redundant Controller Firmware 20.050
9.8
CVSSv3
CVE-2023-2262
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to sen...
Rockwellautomation 1756-en2t Series A Firmware
Rockwellautomation 1756-en2t Series B Firmware
Rockwellautomation 1756-en2t Series C Firmware
Rockwellautomation 1756-en2t Series D Firmware
Rockwellautomation 1756-en2tk Series A Firmware
Rockwellautomation 1756-en2tk Series B Firmware
Rockwellautomation 1756-en2tk Series C Firmware
Rockwellautomation 1756-en2txt Series A Firmware
Rockwellautomation 1756-en2txt Series B Firmware
Rockwellautomation 1756-en2txt Series C Firmware
Rockwellautomation 1756-en2txt Series D Firmware
Rockwellautomation 1756-en2tp Series A Firmware
Rockwellautomation 1756-en2tpk Series A Firmware
Rockwellautomation 1756-en2tr Series A Firmware
Rockwellautomation 1756-en2tr Series B Firmware
Rockwellautomation 1756-en2tr Series C Firmware
Rockwellautomation 1756-en2trk Series A Firmware
Rockwellautomation 1756-en2trk Series B Firmware
Rockwellautomation 1756-en2trk Series C Firmware
Rockwellautomation 1756-en2trxt Series A Firmware
Rockwellautomation 1756-en2trxt Series B Firmware
Rockwellautomation 1756-en2trxt Series C Firmware
9.8
CVSSv3
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated malicious user to achieve remote code executed via crafted malicious packets. The device has the functionality, through a CIP class, t...
Rockwellautomation Factorytalk View
9.8
CVSSv3
CVE-2023-2917
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. If exploited, an unauth...
Rockwellautomation Thinmanager Thinserver 13.1.0
Rockwellautomation Thinmanager Thinserver
9.8
CVSSv3
CVE-2023-3595
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes ...
Rockwellautomation 1756-en2f Series A Firmware -
Rockwellautomation 1756-en2f Series B Firmware -
Rockwellautomation 1756-en2f Series C Firmware -
Rockwellautomation 1756-en2t Series A Firmware -
Rockwellautomation 1756-en2t Series B Firmware -
Rockwellautomation 1756-en2t Series C Firmware -
Rockwellautomation 1756-en2t Series D Firmware -
Rockwellautomation 1756-en2tr Series A Firmware -
Rockwellautomation 1756-en2tr Series B Firmware -
Rockwellautomation 1756-en2tr Series C Firmware -
Rockwellautomation 1756-en3tr Series A Firmware -
Rockwellautomation 1756-en3tr Series B Firmware -
1 Article
9.8
CVSSv3
CVE-2023-29460
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow potentially resulting in ...
Rockwellautomation Arena Simulation 16.20.00
Rockwellautomation Arena Simulation 16.00.00
9.8
CVSSv3
CVE-2023-29461
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap. potentially ...
Rockwellautomation Arena Simulation 16.20.00
Rockwellautomation Arena Simulation 16.00.00
9.8
CVSSv3
CVE-2022-2825
This vulnerability allows remote malicious users to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The iss...
Ptc Thingworx Industrial Connectivity -
Ptc Thingworx Kepware Edge
Ptc Opc-aggregator
Ptc Kepware Kepserverex
Softwaretoolbox Top Server
Rockwellautomation Kepserver Enterprise
Ptc Thingworx Kepware Server
Ge Industrial Gateway Server
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »