Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rockwellautomation compactlogix vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2022-1161
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an ...
Rockwellautomation Compactlogix 1768-l43 FirmwareRockwellautomation Compactlogix 1768-l45 FirmwareRockwellautomation Compactlogix 1769-l31 FirmwareRockwellautomation Compactlogix 1769-l32c FirmwareRockwellautomation Compactlogix 1769-l32e FirmwareRockwellautomation Compactlogix 1769-l35cr FirmwareRockwellautomation Compactlogix 1769-l35e FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5380 FirmwareRockwellautomation Compactlogix 5480 FirmwareRockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Compact Guardlogix 5380 FirmwareRockwellautomation Controllogix 5550 FirmwareRockwellautomation Controllogix 5560 FirmwareRockwellautomation Controllogix 5570 FirmwareRockwellautomation Controllogix 5580 FirmwareRockwellautomation Guardlogix 5560 FirmwareRockwellautomation Guardlogix 5570 FirmwareRockwellautomation Guardlogix 5580 FirmwareRockwellautomation Flexlogix 1794-l34 Firmware
9.8
CVSSv3
CVE-2021-22681
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogi...
Rockwellautomation Factorytalk Services PlatformRockwellautomation Rslogix 5000Rockwellautomation Studio 5000 Logix Designer
9.8
CVSSv3
CVE-2019-10952
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Controllers, Compact Gu...
Rockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Armor Compact Guardlogix 5370 Firmware
8.6
CVSSv3
CVE-2020-6998
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an malicious user to send specially crafted ...
Rockwellautomation Armor Compact Guardlogix 5370 FirmwareRockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Controllogix 5570 FirmwareRockwellautomation Guardlogix 5560 FirmwareRockwellautomation Guardlogix 5570 FirmwareRockwellautomation Guardlogix 5580 Firmware
7.5
CVSSv3
CVE-2019-10954
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Cont...
Rockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 FirmwareRockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Armor Compact Guardlogix 5370 Firmware
7.5
CVSSv3
CVE-2018-19016
Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and previous versions, and CompactLogix 1768-EWEB Version 2.005 and previous versions. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-servic...
Rockwellautomation Ethernet\\/ip Web Server Module 1756-ewebRockwellautomation Ethernet\\/ip Web Server Module 1768-eweb
6.1
CVSSv3
CVE-2019-10955
In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and previous versions, MicroLogix 1100 Controllers v14.00 and previous versions, CompactLogix 5370 L1 controllers v30.014 and previous versions, CompactLogix 5370 L2 controllers v30.014 an...
Rockwellautomation Micrologix 1400 B FirmwareRockwellautomation Micrologix 1400 A FirmwareRockwellautomation Micrologix 1100 FirmwareRockwellautomation Compactlogix 5370 L1 FirmwareRockwellautomation Compactlogix 5370 L2 FirmwareRockwellautomation Compactlogix 5370 L3 Firmware
6.1
CVSSv3
CVE-2016-2279
Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* prior to 28.011+ allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Rockwellautomation Compactlogix 1769-l16er-bb1b FirmwareRockwellautomation Compactlogix 1769-l18er-bb1b FirmwareRockwellautomation Compactlogix 1769-l18erm-bb1b FirmwareRockwellautomation Compactlogix 1769-l24er-qb1b FirmwareRockwellautomation Compactlogix 1769-l24er-qbfc1b FirmwareRockwellautomation Compactlogix 1769-l27erm-qbfc1b FirmwareRockwellautomation Compactlogix 1769-l30er FirmwareRockwellautomation Compactlogix 1769-l30erm FirmwareRockwellautomation Compactlogix 1769-l30er-nse FirmwareRockwellautomation Compactlogix 1769-l33er FirmwareRockwellautomation Compactlogix 1769-l33erm FirmwareRockwellautomation Compactlogix 1769-l36erm FirmwareRockwellautomation Compactlogix 1769-l23e-qb1b FirmwareRockwellautomation Compactlogix 1769-l23e-qbfc1b FirmwareRockwellautomation Compactlogix 1756-en2f Series A FirmwareRockwellautomation Compactlogix 1756-en2f Series B FirmwareRockwellautomation Compactlogix 1756-en2t Series A FirmwareRockwellautomation Compactlogix 1756-en2t Series B FirmwareRockwellautomation Compactlogix 1756-en2t Series C FirmwareRockwellautomation Compactlogix 1756-en2t Series D FirmwareRockwellautomation Compactlogix 1756-en2tr Series A FirmwareRockwellautomation Compactlogix 1756-en2tr Series B Firmware
5.9
CVSSv3
CVE-2017-6024
A Resource Exhaustion issue exists in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an maliciou...
Rockwellautomation Compactlogix 5380 Firmware V28.011Rockwellautomation Compactlogix 5380 Firmware V29.011Rockwellautomation Controllogix 5580 Firmware V29.011Rockwellautomation Controllogix 5580 Firmware V28.012Rockwellautomation Controllogix 5580 Firmware V28.011Rockwellautomation Controllogix 5580 Firmware V28.013
NA
CVE-2012-6442
Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and previous versions; CompactLogix 18 and...
Rockwellautomation Ethernet\\/ip Firmware -Rockwellautomation Compactlogix Firmware -Rockwellautomation Flexlogix Firmware -Rockwellautomation Flex I\\/o Ethernet\\/ip Firmware -Rockwellautomation Micrologix Firmware -Rockwellautomation Guardlogix Controllers Firmware 20Rockwellautomation Compactlogix Firmware 18Rockwellautomation Controllogix Firmware 18Rockwellautomation Guardlogix Firmware 18Rockwellautomation Softlogix Controllers Firmware 19Rockwellautomation Softlogix Firmware 18Rockwellautomation Compactlogix Controllers Firmware 19Rockwellautomation Controllogix Controllers Firmware 20
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook