Rockwell Automation vulnerabilities, page 4
312 vulnerabilities
Known vulnerabilities in Rockwell Automation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 228 products.
CVE-2025-9281rockwell automationarmorstart® lt+1
EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device rebootsCVE-2025-9466rockwell automationarmorstart® lt+1EPSS score0.63%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP and CIP grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9067rockwell automationfactorytalk linx+1EPSS score0.18%
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.CVE-2025-9066rockwell automationfactorytalk® viewpointEPSS score0.46%
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.CVE-2025-9465rockwell automationarmorstart® lt+1EPSS score0.50%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9041rockwell automationflex 5000 i/oEPSS score0.32%
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault (Code 16#0010), and the module cannot recover without a power cycle.CVE-2025-9437rockwell automationarmorstart aopEPSS score0.37%
A security issue exists within the Studio 5000 Logix Designer add-on profile (AOP) for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model (COM) methods.CVE-2025-9042rockwell automationflex 5000 i/oEPSS score0.32%
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault (Code 16#0010), and the module cannot recover without a power cycle.CVE-2025-9036rockwell automationfactorytalk® action managerEPSS score0.16%
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.CVE-2025-9166rockwell automationcontrollogix 5580+1EPSS score0.43%
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.CVE-2025-9464rockwell automationarmorstart® lt+1EPSS score0.40%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive.CVE-2025-9280rockwell automationarmorstart® lt+1EPSS score0.49%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot.CVE-2025-14272rockwell automationfactorytalk analytics pavilionxEPSS score0.24%
A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actions.CVE-2025-14027rockwell automationcontrollogix® redundancy enhanced moduleEPSS score0.38%
Multiple denial-of-service vulnerabilities exist in the affected product. These issues can be triggered through various crafted inputs, including malformed Class 3 messages, memory leak conditions, and other resource exhaustion scenarios. Exploitation may cause the device to become unresponsive and, in some cases, result in a major nonrecoverable fault. Recovery may require a restart.CVE-2025-14376rockwell automationverve® asset managerEPSS score0.14%
A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.CVE-2025-14377rockwell automationverve® asset managerEPSS score0.20%
A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024.CVE-2025-7025rockwell automationarena simulation+1EPSS score0.26%
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.CVE-2025-7033rockwell automationarena simulation+1EPSS score0.26%
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.CVE-2025-7032rockwell automationarena simulation+1EPSS score0.26%
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.CVE-2025-7350rockwell automationstratix iosEPSS score0.63%
A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication.