Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2024-9124 Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability — Drives - PowerFlex 6000T CWE-754 7.5AI High AI 2024-10-08
CVE-2024-6436 Rockwell Automation Input Validation Vulnerability exists in the SequenceManager™ Server — SequenceManager™ CWE-20 8.6AI High AI 2024-09-27
CVE-2024-7961 Rockwell Automation Path Traversal Vulnerability in Pavilion8® — Pavilion8® CWE-22 9.8AI Critical AI 2024-09-12
CVE-2024-7960 Rockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8® — Pavilion8® CWE-269 8.1AI High AI 2024-09-12
CVE-2024-8533 Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions — 2800C OptixPanel™ Compact CWE-269 7.8AI High AI 2024-09-12
CVE-2024-6077 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP — CompactLogix 5380 CWE-20 7.5AI High AI 2024-09-12
CVE-2024-45826 ThinManager® Code Execution Vulnerability — ThinManager CWE-610 6.8 Medium 2024-09-12
CVE-2024-45825 5015-U8IHFT Denial-of-Service Vulnerability via CIP Message — 5015-U8IHFT CWE-20 7.5 High 2024-09-12
CVE-2024-45823 FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets — FactoryTalk® Batch View™ CWE-287 8.1 High 2024-09-12
CVE-2024-45824 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation — FactoryTalk View Site Edition CWE-77 9.8 Critical 2024-09-12
CVE-2024-7988 ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities — ThinManager® ThinServer™ CWE-20 9.8AI Critical AI 2024-08-26
CVE-2024-7987 Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities — ThinManager® ThinServer™ 6.7AI Medium AI 2024-08-26
CVE-2024-7986 Rockwell Automation ThinManager® ThinServer™ Information Disclosure — ThinManager® ThinServer™ CWE-732 7.5AI High AI 2024-08-23
CVE-2024-40620 Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol — Pavilion8® CWE-311 7.5AI High AI 2024-08-14
CVE-2024-40619 Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling — ControlLogix® 5580 CWE-754 7.5AI High AI 2024-08-14
CVE-2024-7513 Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions — FactoryTalk View Site Edition CWE-732 7.8AI High AI 2024-08-14
CVE-2024-6078 Rockwell Automation Authentication Bypass Vulnerability in DataMosaix™ — DataMosaix™ CWE-287 9.1AI Critical AI 2024-08-14
CVE-2024-7515 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation — CompactLogix 5380 (5069-L3z) CWE-20 7.5AI High AI 2024-08-14
CVE-2024-7507 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation — CompactLogix 5380 (5069 – L3z) CWE-20 7.5AI High AI 2024-08-14
CVE-2024-7567 Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port — PLC - Micro850/870 (2080 -L50E/2080 -L70E) CWE-400 7.5AI High AI 2024-08-13
CVE-2024-6079 DLL Hijacking Vulnerability Exists in Rockwell Automation Emulate3D™ — Emulate3D™ CWE-610 7.8AI High AI 2024-08-13
CVE-2024-6242 Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices — ControlLogix® 5580 (1756-L8z) CWE-420 9.8AI Critical AI 2024-08-01
CVE-2024-6089 Rockwell Automation Major nonrecoverable fault in 5015 – AENFTXT — 5015 - AENFTXT CWE-20 9.1AI Critical AI 2024-07-16
CVE-2024-6326 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services — FactoryTalk® System Services (installed via FTPM) CWE-269 8.1AI High AI 2024-07-16
CVE-2024-6325 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services — FactoryTalk® System Services (installed via FTPM) CWE-269 9.8AI Critical AI 2024-07-16
CVE-2024-6435 Rockwell Automation Privilege Escalation Vulnerability in Pavilion8® — Pavilion8® CWE-732 7.1AI High AI 2024-07-16
CVE-2024-5990 ThinManager® ThinServer™ Improper Input Validation Vulnerability — ThinManager® ThinServer™ CWE-20 7.5AI High AI 2024-06-25
CVE-2024-5989 Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability — ThinManager® ThinServer™ CWE-20 9.8AI Critical AI 2024-06-25
CVE-2024-5988 Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability — ThinManager® ThinServer™ CWE-20 9.8AI Critical AI 2024-06-25
CVE-2024-37369 Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions — FactoryTalk® View SE CWE-732 8.8AI High AI 2024-06-14

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.