Rockwell Automation vulnerabilities, page 2
312 vulnerabilities
Known vulnerabilities in Rockwell Automation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 228 products.
CVE-2021-32960rockwell automationfactorytalk® services platform+1
EPSS score2.43%
Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.CVE-2025-2288rockwell automationarena+1EPSS score0.30%
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.CVE-2025-2285rockwell automationarena+1EPSS score0.30%
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.CVE-2025-2293rockwell automationarena+1EPSS score0.30%
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.CVE-2025-2829rockwell automationarena+1EPSS score0.30%
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.CVE-2025-2286rockwell automationarena+1EPSS score0.30%
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.CVE-2025-2287rockwell automationarena+1EPSS score0.30%
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.CVE-2025-13036rockwell automationfactorytalk historian seEPSS score0.29%
An authentication
bypass security issue exists within FactoryTalk Historian Site Edition. By
continually sending requests to the login endpoint, an attacker may obtain a
valid authentication token.CVE-2025-13823rockwell automationmicro820®, micro850®, micro870®EPSS score0.20%
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault.CVE-2025-13824rockwell automationmicro820®, micro850®, micro870®EPSS score0.34%
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.CVE-2025-1449rockwell automationverve® asset managerEPSS score0.67%
A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory (ADI) capability (deprecated since the 1.36 release) allows users to change a variable with inadequate sanitizing. If exploited, it could allow a threat actor with administrative access to run arbitrary commands in the context of the container running the service.CVE-2025-11743rockwell automationcompactlogix 5370EPSS score0.18%
A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover.CVE-2025-11697rockwell automationstudio 5000 ® simulation interfaceEPSS score0.15%
A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.CVE-2025-11918rockwell automationarena simulation+1EPSS score0.17%
Rockwell Automation Arena® suffers from a
stack-based buffer overflow vulnerability. The specific flaw exists within the
parsing of DOE files. Local attackers are able to exploit this issue to
potentially execute arbitrary code on affected installations of Arena®. Exploiting
the vulnerability requires opening a malicious DOE file.CVE-2025-11085rockwell automationfactorytalk® datamosaix™ private cloudEPSS score0.37%
A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website.CVE-2025-11696rockwell automationstudio 5000® simulation interface™EPSS score0.18%
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.CVE-2025-11084rockwell automationfactorytalk® datamosaix™ private cloudEPSS score0.16%
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.CVE-2025-11862rockwell automationverve® asset managerEPSS score0.34%
A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.CVE-2025-11694rockwell automationcompactlogix 5370EPSS score0.17%
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.CVE-2025-11698rockwell automationcompactlogix® 5380 recovery image compact guardlogix® 5380 recovery image compactlogix® 5480 recovery image controllogix® 5580 recovery image guardlogix® 5580 recovery imageEPSS score0.43%
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).