Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2026-12656 1732E ArmorBlock® - Multiple Vulnerabilities — 1732E ArmorBlock® I/O CWE-770 8.7 High 2026-10-13
CVE-2026-12655 1732E ArmorBlock® - Multiple Vulnerabilities — 1732E ArmorBlock® I/O CWE-294 8.8 High 2026-10-13
CVE-2026-6071 Code Execution Vulnerability in Arena® — Arena 7.5 High 2026-09-03
CVE-2024-7956 Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud — DataMosaix™ Private Cloud 7.6 High 2026-09-02
CVE-2024-7953 DataEdgePlatform DataMosaix™ Private Cloud — DataEdgePlatform DataMosaix™ Private Cloud 8.7 High 2026-09-01
CVE-2024-7952 DataEdgePlatform DataMosaix™ Private Cloud — DataEdgePlatform DataMosaix™ Private Cloud 8.7 High 2026-09-01
CVE-2026-9634 Redundancy Module Configuration Tool - Multiple Vulnerabilities — Redundancy Module Configuration Tool CWE-276 7.0 High 2026-09-01
CVE-2026-9633 Redundancy Module Configuration Tool - Multiple Vulnerabilities — Redundancy Module Configuration Tool CWE-276 7.0 High 2026-09-01
CVE-2026-12661 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability — FactoryTalk® Historian Machine Edition CWE-121 4.8 Medium 2026-09-01
CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability — FactoryTalk® Historian Machine Edition CWE-787 8.6 High 2026-09-01
CVE-2026-9625 RSLinx Classic® - Multiple Vulnerabilities — RSLinx Classic® CWE-120 8.7 High 2026-09-01
CVE-2026-9624 RSLinx Classic® - Multiple Vulnerabilities — RSLinx Classic® CWE-191 8.7 High 2026-09-01
CVE-2026-9622 RSLinx Classic® - Multiple Vulnerabilities — RSLinx Classic® CWE-191 8.7 High 2026-09-01
CVE-2026-9621 RSLinx Classic® - Multiple Vulnerabilities — RSLinx Classic® CWE-190 9.2 Critical 2026-09-01
CVE-2026-12663 ControlFLASH ® – Improper Access Control — ControlFLASH ® CWE-306 7.0 High 2026-09-01
CVE-2026-9637 CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities — CompactLogix® 5380 / ControlLogix® 5580 CWE-119 8.7 High 2026-09-01
CVE-2026-16675 Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation — FactoryTalk® Activation Manager CWE-307 8.5 High 2026-09-01
CVE-2026-84235 Rockwell Automation 1756-ENBT Denial of Service Vulnerability — 1756-ENBT Module 8.7 High 2026-09-01
CVE-2026-19472 Rockwell Automation ArmorStart® LT Denial Of Service — ArmorStart® LT CWE-770 8.7 High 2026-09-01
CVE-2026-19471 Rockwell Automation ArmorStart® LT Stored Cross-site scripting — ArmorStart® LT CWE-79 6.9 Medium 2026-09-01
CVE-2026-75112 OTTO® Fleet Manager – Weak Password Hashing Configuration — OTTO® Fleet Manager CWE-916 6.9 Medium 2026-08-19
CVE-2026-12659 Rockwell Automation Flex 5000® Adapter - Denial of Service — The FLEX 5000® EtherNet/IP Adapter CWE-415 - - 2026-07-14
CVE-2026-9128 Studio 5000 Logix Designer® – Multiple Vulnerabilities — Studio 5000 Logix Designer CWE-428 - - 2026-07-14
CVE-2026-9636 Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability — ControlLogix® 5580, CompactLogix® 5380, GuardLogix® 5580, Compact GuardLogix® 5380, 1756-EN4TR CWE-299 - - 2026-07-14
CVE-2026-9127 Studio 5000 Logix Designer® – Multiple Vulnerabilities — Studio 5000 Logix Designer CWE-863 - - 2026-07-14
CVE-2026-9108 Studio 5000 Logix Designer® – Multiple Vulnerabilities — Studio 5000 Logix Designer CWE-22 - - 2026-07-14
CVE-2026-11917 ThinManager® - Path Traversal via API — FactoryTalk ThinManager CWE-22 - - 2026-07-14
CVE-2026-9292 Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting — FactoryTalk® DataMosaix™ Private Cloud CWE-79 - - 2026-07-14
CVE-2025-11698 CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow — CompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery Image CWE-120 - - 2026-07-14
CVE-2025-12012 CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow — CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570 CWE-120 - - 2026-07-14

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.