Rockwell Automation vulnerabilities, page 5
312 vulnerabilities
Known vulnerabilities in Rockwell Automation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 228 products.
CVE-2025-7330rockwell automationcomms - 1783-natr+1
EPSS score0.21%
A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.CVE-2025-7774rockwell automation5032-cfgb16m12dr+2EPSS score0.41%
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions.CVE-2025-7973rockwell automationfactorytalk® viewpointEPSS score0.14%
A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an elevated command prompt, enabling full privilege escalation.CVE-2025-7972rockwell automationfactorytalk linx+1EPSS score0.50%
A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.CVE-2025-7773rockwell automation5032-cfgb16m12dr+2EPSS score0.41%
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.CVE-2025-7693rockwell automationplc - micro850 l50eEPSS score0.37%
A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF015. To recover, clear the fault.CVE-2025-7970rockwell automationfactorytalk® activation manager+1EPSS score0.37%
A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise.CVE-2025-7353rockwell automation1756-en2f/c+4EPSS score0.85%
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.CVE-2025-7328rockwell automationcomms - 1783-natr+1EPSS score0.54%
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able to communicate through NATR as a result of denial-of-service or NAT rule modifications. NAT rule modification could also result in device communication to incorrect endpoints. Admin account takeover could allow modification of configuration and require physical access to restore.CVE-2025-7971rockwell automationstudio 5000 logix designerEPSS score0.13%
A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash.CVE-2025-7329rockwell automationcomms - 1783-natr+1EPSS score0.26%
A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation requires an attacker to be able to update configuration fields behind admin login.CVE-2025-24478rockwell automationcompact guardlogix 5380 sil 3+1EPSS score0.47%
A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service.CVE-2025-24481rockwell automationfactorytalk® view site editionEPSS score0.16%
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.CVE-2025-24480rockwell automationfactorytalk view machine editionEPSS score0.73%
A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.CVE-2025-24479rockwell automationfactorytalk view machine editionEPSS score0.17%
A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user.CVE-2025-24482rockwell automationfactorytalk® view site editionEPSS score0.25%
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.CVE-2025-6377rockwell automationarena+1EPSS score0.23%
A remote
code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE
file can force Arena Simulation to write beyond the boundaries of an allocated
object. Exploitation
requires user interaction, such as opening a malicious file within the software.
If exploited, a threat actor could execute arbitrary code on the target system.
The software must run under the context of the administrator in order to cause
worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.CVE-2025-6376rockwell automationarena+1EPSS score0.23%
A remote
code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE
file can force Arena Simulation to write beyond the boundaries of an allocated
object. Exploitation
requires user interaction, such as opening a malicious file within the software.
If exploited, a threat actor could execute arbitrary code on the target system.
The software must run under the context of the administrator in order to cause
worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.CVE-2025-12012rockwell automationcompactlogix® 5370 compact guardlogix® 5370 controllogix® 5570 guardlogix® 5570EPSS score0.43%
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).CVE-2025-12807rockwell automationfactorytalk® datamosaix™ private cloudEPSS score0.43%
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints.