Rockwell Auotmation vulnerabilities
4 vulnerabilities
Known vulnerabilities in Rockwell Auotmation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- 1756 En2Tpxt Series A2 vulnerabilities
- 1715 Ethernet/Ip Communications Module1 vulnerabilities
- Arena® Simulation1 vulnerabilities
CVE-2026-10577rockwell auotmation1715 ethernet/ip communications module
EPSS score0.41%
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.CVE-2026-8312rockwell auotmationarena® simulation+1EPSS score0.27%
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.CVE-2023-2262rockwell auotmation1756-en2tpxt series a+54EPSS score1.29%
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.CVE-2023-3595rockwell auotmation1756-en2tpxt series a+33EPSS score5.53%
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.