Rockwell Automation vulnerabilities, page 3
312 vulnerabilities
Known vulnerabilities in Rockwell Automation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 228 products.
CVE-2025-0498rockwell automationfactorytalk® assetcentre+1
EPSS score0.38%
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.CVE-2025-0477rockwell automationfactorytalk® assetcentre+1EPSS score0.37%
An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.CVE-2025-0497rockwell automationfactorytalk® assetcentre+1EPSS score0.33%
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.CVE-2025-0659rockwell automationdataedgeplatform datamosaix™ private cloudEPSS score0.39%
A path
traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character
sequence in the body of the vulnerable endpoint, it is possible to overwrite
files outside of the intended directory. A threat actor with admin privileges could
leverage this vulnerability to overwrite reports including user projects.CVE-2025-0631rockwell automationpowerflex 755EPSS score0.27%
A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text.CVE-2025-9064rockwell automationfactorytalk view machine edition+1EPSS score0.61%
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.CVE-2025-9178rockwell automation1715-aentr ethernet/ip adapterEPSS score0.32%
A denial-of-service security issue exists in the affected product and version. The security issue is caused through CIP communication using crafted payloads. The security issue could result in no CIP communication with 1715 EtherNet/IP Adapter.A restart is required to recover.CVE-2025-9278rockwell automationarmorstart® lt+1EPSS score0.49%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. After running a Burp Suite active scan, the device loses ICMP connectivity, causing the web application to become inaccessible.CVE-2025-9364rockwell automationfactorytalk® analytics™ logixai®+1EPSS score0.29%
An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data.CVE-2025-9124rockwell automationcompact guardlogix® 5370EPSS score0.40%
A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault.CVE-2025-9368rockwell automation432es-ig3 series aEPSS score0.37%
A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the device.CVE-2025-9177rockwell automation1715-aentr ethernet/ip adapterEPSS score0.32%
A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover and utilize the webpage.CVE-2025-9279rockwell automationarmorstart® lt+1EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9282rockwell automationarmorstart® lt+1EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9161rockwell automationfactorytalk optix+1EPSS score0.55%
A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution.CVE-2025-9063rockwell automationpanelview plus 7 performance series b+1EPSS score0.39%
An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs, and more.CVE-2025-9160rockwell automationcompactlogix 5480EPSS score0.19%
A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution.CVE-2025-9068rockwell automationfactorytalk linx+1EPSS score0.18%
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.CVE-2025-9283rockwell automationarmorstart® lt+1EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limits Storms tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9065rockwell automationthinmanager+1EPSS score0.47%
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.