Rockwellautomation
96 CVEs across 473 Rockwellautomation products. Browse Rockwellautomation vulnerabilities, severities, and proof-of-concept exploits.
Rockwellautomation products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-8314 | High | 7.3 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. The vulnerability stems from impr… |
CVE-2026-8313 | High | 7.3 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) component. The vulnerability stems from imp… |
CVE-2026-8312 | High | 7.3 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from impr… |
CVE-2026-8085 | High | 7.3 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. The vulnerability stems from impr… |
CVE-2019-25276 | High | 7.8 | 2026-02-05 | Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentiall… |
CVE-2025-9466 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP and CIP grammar te… |
CVE-2025-9465 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, t… |
CVE-2025-9464 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP… |
CVE-2025-9283 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limits Storms… |
CVE-2025-9282 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm te… |
CVE-2025-9281 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm… |
CVE-2025-9280 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become u… |
CVE-2025-9279 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm t… |
CVE-2025-9278 | High | 7.5 | 2026-01-20 | A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. After running a Burp Suite active scan, the device loses ICMP c… |
CVE-2025-11918 | High | 7.3 | 2025-11-14 | Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers… |
CVE-2025-9068 | High | 7.8 | 2025-10-14 | A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authentic… |
CVE-2025-9067 | High | 7.8 | 2025-10-14 | A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can i… |
CVE-2025-9064 | Critical | 9.1 | 2025-10-14 | A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete… |
CVE-2025-9063 | Critical | 9.8 | 2025-10-14 | An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows… |
CVE-2025-7330 | Medium | 6.5 | 2025-10-14 | A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. Th… |
CVE-2025-7329 | Medium | 4.8 | 2025-10-14 | A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or… |
CVE-2025-7328 | Critical | 9.8 | 2025-10-14 | Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical function… |
CVE-2025-9364 | High | 8.8 | 2025-09-09 | An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an att… |
CVE-2025-9166 | High | 7.5 | 2025-09-09 | A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward me… |
CVE-2025-9161 | High | 8.8 | 2025-09-09 | A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, whi… |
CVE-2025-9065 | High | 8.8 | 2025-09-09 | A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attac… |
CVE-2025-8008 | Medium | 6.5 | 2025-09-09 | A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the devi… |
CVE-2025-8007 | Medium | 6.5 | 2025-09-09 | A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Majo… |
CVE-2025-7970 | High | 7.5 | 2025-09-09 | A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to dec… |
CVE-2025-7972 | Critical | 9.1 | 2025-08-14 | A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP toke… |
CVE-2025-7033 | High | 7.8 | 2025-08-05 | A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory spa… |
CVE-2025-7032 | High | 7.8 | 2025-08-05 | A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory spa… |
CVE-2025-7025 | High | 7.8 | 2025-08-05 | A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory spa… |
CVE-2025-6377 | High | 7.8 | 2025-07-09 | A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries… |
CVE-2025-6376 | High | 7.8 | 2025-07-09 | A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries… |
CVE-2025-3618 | Medium | 5.5 | 2025-04-15 | A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while… |
CVE-2025-3617 | High | 7.8 | 2025-04-15 | A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary folder caus… |
CVE-2025-3289 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper valid… |
CVE-2025-3288 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-3287 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper valid… |
CVE-2025-3286 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-3285 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-2829 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer… |
CVE-2025-2293 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer… |
CVE-2025-2288 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer… |
CVE-2025-2287 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of us… |
CVE-2025-2286 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of us… |
CVE-2025-2285 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of us… |
CVE-2025-0498 | Critical | 9.8 | 2025-01-30 | A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insec… |
CVE-2025-0497 | Critical | 9.8 | 2025-01-30 | A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to stori… |
CVE-2025-0477 | Critical | 9.8 | 2025-01-30 | An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak… |
CVE-2024-12672 | High | 7.3 | 2024-12-19 | A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DO… |
CVE-2024-12175 | High | 7.8 | 2024-12-19 | Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force th… |
CVE-2024-11364 | High | 7.3 | 2024-12-19 | Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and… |
CVE-2024-11157 | High | 7.3 | 2024-12-19 | A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DO… |
CVE-2024-12130 | High | 7.8 | 2024-12-05 | An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force t… |
CVE-2024-11158 | Medium | 6.7 | 2024-12-05 | An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and f… |
CVE-2024-11156 | High | 7.8 | 2024-12-05 | An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundari… |
CVE-2024-11155 | High | 7.8 | 2024-12-05 | A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the sof… |
CVE-2024-37365 | High | 7.3 | 2024-11-12 | A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyo… |
CVE-2024-10387 | High | 7.5 | 2024-10-25 | CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to… |
CVE-2024-10386 | Critical | 9.8 | 2024-10-25 | CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to se… |
CVE-2024-6207 | High | 7.5 | 2024-10-14 | CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the… |
CVE-2024-7847 | High | 7.7 | 2024-10-14 | VULNERABILITY DETAILS Rockwell Automation used the latest versions of the CVSS scoring system to assess the following vulnerabilities. The following vulnerabi… |
CVE-2024-9124 | High | 7.5 | 2024-10-08 | A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with requests, it will become unavailable. The… |
CVE-2024-8626 | High | 7.5 | 2024-10-08 | Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability… |
CVE-2024-6436 | Medium | 6.5 | 2024-09-27 | An input validation vulnerability exists in the Rockwell Automation Sequence Manager™ which could allow a malicious user to send malformed packets to the serve… |
CVE-2024-7961 | Critical | 9.8 | 2024-09-12 | A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could upload arbitrary files to the server t… |
CVE-2024-7960 | Critical | 9.1 | 2024-09-12 | The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settings. The vulnerabili… |
CVE-2024-8533 | High | 8.8 | 2024-09-12 | A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions all… |
CVE-2024-6077 | High | 7.5 | 2024-09-12 | A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If ex… |
CVE-2024-45826 | Medium | 6.8 | 2024-09-12 | CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a craft… |
CVE-2024-45825 | High | 7.5 | 2024-09-12 | CVE-2024-45825 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the… |
CVE-2024-45823 | High | 8.1 | 2024-09-12 | CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts… |
CVE-2024-45824 | Critical | 9.8 | 2024-09-12 | CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Inject… |
CVE-2024-7988 | Critical | 9.8 | 2024-08-26 | A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with Syst… |
CVE-2024-7987 | High | 7.8 | 2024-08-26 | A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with Syst… |
CVE-2024-7986 | High | 7.5 | 2024-08-23 | A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can expl… |
CVE-2024-7515 | High | 7.5 | 2024-08-14 | CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fau… |
CVE-2024-7513 | High | 8.8 | 2024-08-14 | CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing… |
CVE-2024-7507 | Medium | 6.5 | 2024-08-14 | CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received… |
CVE-2024-40620 | High | 7.5 | 2024-08-14 | CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data bei… |
CVE-2024-40619 | High | 7.5 | 2024-08-14 | CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the… |
CVE-2024-6326 | Medium | 5.5 | 2024-07-16 | An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerabi… |
CVE-2024-6325 | Medium | 6.5 | 2024-07-16 | The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/a… |
CVE-2024-6089 | High | 7.5 | 2024-07-16 | An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to resu… |
CVE-2024-6435 | High | 8.8 | 2024-07-16 | A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privileges to access functions which should… |
CVE-2024-5990 | High | 7.5 | 2024-06-25 | Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ an… |
CVE-2024-5989 | Critical | 9.8 | 2024-06-25 | Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote c… |
CVE-2024-5988 | Critical | 9.8 | 2024-06-25 | Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote cod… |
CVE-2024-5659 | Medium | 6.5 | 2024-06-14 | Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/A… |
CVE-2024-37369 | High | 8.8 | 2024-06-14 | A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lis… |
CVE-2024-37368 | High | 7.5 | 2024-06-14 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to… |
CVE-2024-37367 | High | 7.5 | 2024-06-14 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTVie… |
CVE-2024-4609 | Critical | 9.8 | 2024-05-16 | A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if… |
CVE-2024-3493 | High | 8.6 | 2024-04-15 | A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major n… |
CVE-2024-2424 | High | 7.5 | 2024-04-15 | An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (… |
CVE-2024-2929 | High | 7.8 | 2024-03-26 | A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the… |
CVE-2024-21920 | Medium | 4.4 | 2024-03-26 | A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This… |
CVE-2024-21919 | High | 7.8 | 2024-03-26 | An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software… |