Rockwell vulnerabilities

4 vulnerabilities

Known vulnerabilities in Rockwell products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.

Products

4
7.8CVE-2018-19016rockwellrockwell automation ethernet/ip web server modules 1756-eweb (includes 1756-ewebk) version 5.001 and earlier, and compactlogix 1768-eweb version 2.005 and earlier.+2
EPSS score
3.19%
Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.
7.8CVE-2018-18981rockwellrockwell automation factorytalk services platform v2.90 and earlier+1
EPSS score
3.87%
In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that could lead to a partial or complete denial-of-service condition to the affected services.
7.8CVE-2019-13519rockwellrockwell automation arena simulation software+1
EPSS score
5.57%
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
7.8CVE-2019-13521rockwellrockwell automation arena simulation software+1
EPSS score
5.57%
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.