Rockwellautomation vulnerabilities, page 5

336 vulnerabilities

Known vulnerabilities in Rockwellautomation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 272 products.

9.9CriticalCVE-2025-7328rockwell automation · comms - 1783-natr +1 moreRockwell Automation Comms - 1783-NATR Multiple Broken Authentication VulnerabilitiesMultiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able to communicate through NATR as a result of denial-of-service or NAT rule modifications. NAT rule modification could also result in device communication to incorrect endpoints. Admin account takeover could allow modification of configuration and require physical access to restore.EPSS0.54%8.5HighCVE-2025-7329rockwell automation · comms - 1783-natr +1 moreRockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting VulnerabilityA Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation requires an attacker to be able to update configuration fields behind admin login.EPSS0.26%7.8HighCVE-2025-6377rockwell automation · arena +1 moreArena® Simulation Out-Of-Bounds Write Remote Code Execution VulnerabilityA remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.EPSS0.23%7.8HighCVE-2025-6376rockwell automation · arena +1 moreArena® Simulation Out-Of-Bounds Write Remote Code Execution VulnerabilityA remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.EPSS0.23%7.1HighCVE-2025-8008rockwell automation · 1756-ent2r, 1756-en4tr, 1756-en4trxt +5 moreRockwell Automation 1756-ENT2R, EN4TR, EN4TRXT VulnerabilityA security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash.EPSS0.68%7.1HighCVE-2025-8007rockwell automation · 1756-ent2r, 1756-en4tr, 1756-en4trxt +5 moreRockwell Automation 1756-ENT2R, EN4TR, EN4TRXT VulnerabilityA security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.EPSS0.26%8.5HighCVE-2025-3289rockwell automation · arena +1 moreLocal Code Execution Vulnerability in Arena®A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.EPSS0.31%8.5HighCVE-2025-3288rockwell automation · arena +1 moreLocal Code Execution Vulnerability in Arena®A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.EPSS0.30%8.5HighCVE-2025-3287rockwell automation · arena +1 moreLocal Code Execution Vulnerability in Arena®A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.EPSS0.31%8.5HighCVE-2025-3285rockwell automation · arena +1 moreLocal Code Execution Vulnerability in Arena®A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.EPSS0.30%8.5HighCVE-2025-3286rockwell automation · arena +1 moreLocal Code Execution Vulnerability in Arena®A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.EPSS0.30%8.5HighCVE-2025-3618rockwell automation · thinmanager +1 moreLocal Privilege Escalation VulnerabilityA denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software.EPSS1.78%8.5HighCVE-2025-3617rockwell automation · thinmanager +1 moreLocal Privilege Escalation in ThinManager®A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary folder causing the Access Control Entry of the directory to inherit permissions from the parent directory. If exploited, a threat actor could inherit elevated privileges.EPSS0.30%7.5HighCVE-2020-13573rockwellautomation · rslinxrockwellautomation rslinxA denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.EPSS3.46%8.1HighCVE-2020-11999rockwellautomation · factorytalk_linx +1 morerockwellautomation factorytalk_linxFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. An exposed API call allows users to provide files to be processed without sanitation. This may allow an attacker to specify a filename to execute unauthorized code and modify files or data.EPSS2.80%5.3MediumCVE-2020-14504rockwell automation · 1734-aentr +2 morerockwell automation 1734-aentrThe web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings.EPSS1.27%5.5MediumCVE-2020-14480rockwell automation · factorytalk® view se +1 morerockwell automation factorytalk® view seDue to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials.EPSS0.27%6.1MediumCVE-2020-14502rockwell automation · 1734-aentr +2 morerockwell automation 1734-aentrThe web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface.EPSS1.01%10CriticalCVE-2020-14516rockwellautomation · factorytalk_services_platformrockwellautomation factorytalk_services_platformIn Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being hashed properly.EPSS4.24%7.8HighCVE-2020-14481rockwell automation · factorytalk® view se +1 morerockwell automation factorytalk® view seThe DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.EPSS0.16%