Rockwellautomation vulnerabilities, page 4
336 vulnerabilities
Known vulnerabilities in Rockwellautomation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 272 products.
HighCVE-2025-9279rockwell automation · armorstart® lt +1 moreArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.EPSS0.61%HighCVE-2025-9282rockwell automation · armorstart® lt +1 moreArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.EPSS0.61%HighCVE-2025-9161rockwell automation · factorytalk optix +1 moreRockwell Automation FactoryTalk Optix Remote Code Execution VulnerabilityA security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution.EPSS0.55%CriticalCVE-2025-9063rockwell automation · panelview plus 7 performance series b +1 moreRockwell Automation PanelView Plus 7 Performance Series B Authentication BypassAn authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs, and more.EPSS0.39%HighCVE-2025-9068rockwell automation · factorytalk linx +1 moreRockwell Automation FactoryTalk® Linx Privilege Escalation VulnerabilitiesA security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.EPSS0.18%HighCVE-2025-9283rockwell automation · armorstart® lt +1 moreArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limits Storms tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.EPSS0.61%HighCVE-2025-9065rockwell automation · thinmanager +1 moreRockwell Automation ThinManager® Server-Side Request Forgery VulnerabilityA server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.EPSS0.47%HighCVE-2025-9281rockwell automation · armorstart® lt +1 moreArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device rebootsEPSS0.61%HighCVE-2025-9466rockwell automation · armorstart® lt +1 moreArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP and CIP grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.EPSS0.63%HighCVE-2025-9067rockwell automation · factorytalk linx +1 moreRockwell Automation FactoryTalk® Linx Privilege Escalation VulnerabilitiesA security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.EPSS0.18%HighCVE-2025-9465rockwell automation · armorstart® lt +1 moreArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.EPSS0.50%HighCVE-2025-9166rockwell automation · controllogix 5580 +1 moreRockwell Automation ControlLogix® 5580 V35.013 Denial-Of-ServiceA denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.EPSS0.43%HighCVE-2025-9464rockwell automation · armorstart® lt +1 moreRockwell Automation ArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive.EPSS0.40%HighCVE-2025-9280rockwell automation · armorstart® lt +1 moreArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesA security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot.EPSS0.49%HighCVE-2025-7025rockwell automation · arena simulation +1 moreRockwell Automation Heap-based Buffer Overflow In Arena® SimulationA memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.EPSS0.26%HighCVE-2025-7033rockwell automation · arena simulation +1 moreRockwell Automation Heap-based Buffer Overflow In Arena® SimulationA memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.EPSS0.26%HighCVE-2025-7032rockwell automation · arena simulation +1 moreRockwell Automation Stack-based Buffer Overflow In Arena® SimulationA memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.EPSS0.26%HighCVE-2025-7330rockwell automation · comms - 1783-natr +1 moreRockwell Automation 1783-NATR Cross-Site Request Forgery VulnerabilityA cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.EPSS0.21%CriticalCVE-2025-7972rockwell automation · factorytalk linx +1 moreRockwell Automation FactoryTalk® Linx Network Browser Security Bypass VulnerabilityA security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.EPSS0.50%HighCVE-2025-7970rockwell automation · factorytalk® activation manager +1 moreRockwell Automation FactoryTalk Activation Manager Lack of Encryption VulnerabilityA security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise.EPSS0.37%