Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2024-5659 Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers — ControlLogix® 5580 CWE-670 6.5AI Medium AI 2024-06-14
CVE-2024-37368 Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction — FactoryTalk® View SE CWE-287 5.3AI Medium AI 2024-06-14
CVE-2024-37367 Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction — FactoryTalk® View SE CWE-287 5.3AI Medium AI 2024-06-14
CVE-2024-3640 Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables — FactoryTalk® Remote Access™ CWE-428 7.2AI High AI 2024-05-16
CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability — FactoryTalk® View SE CWE-20 9.8AI Critical AI 2024-05-16
CVE-2024-3493 Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value — ControlLogix 5580 CWE-20 8.6 High 2024-04-15
CVE-2024-2929 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption — Arena Simulation CWE-119 7.8 High 2024-03-26
CVE-2024-21920 Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow — Arena Simulation CWE-125 4.4 Medium 2024-03-26
CVE-2024-21919 Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer — Arena Simulation CWE-824 7.8 High 2024-03-26
CVE-2024-21918 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption — Arena Simulation CWE-416 7.8 High 2024-03-26
CVE-2024-21913 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption — Arena Simulation CWE-122 7.8 High 2024-03-26
CVE-2024-21912 Rockwell Automation Arena Simulation vulnerable to out of bounds write — Arena Simulation CWE-787 7.8 High 2024-03-26
CVE-2024-21914 Rockwell Automation - FactoryTalk® View ME on PanelView™ Plus 7 Boot Terminal lack Security Protections — FactoryTalk® View ME 5.3 Medium 2024-03-25
CVE-2024-21915 Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality — FactoryTalk® Service Platform CWE-732 9.0 Critical 2024-02-16
CVE-2024-21916 Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller — ControlLogix® 5570 CWE-119 8.6 High 2024-01-31
CVE-2024-21917 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability — FactoryTalk® Service Platform CWE-347 9.8 Critical 2024-01-31
CVE-2023-27858 Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability — Arena Simulation CWE-824 7.8 High 2023-10-27
CVE-2023-27854 Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability — Arena Simulation CWE-125 7.8 High 2023-10-27
CVE-2023-46289 Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation — FactoryTalk® View Site Edition CWE-20 7.5 High 2023-10-27
CVE-2023-46290 Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability — FactoryTalk® Services Platform CWE-287 8.1 High 2023-10-27
CVE-2023-29464 Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure — FactoryTalk Linx CWE-20 8.2 High 2023-10-13
CVE-2023-2262 Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow — 1756-EN2T Series A, B, C CWE-121 9.8 Critical 2023-09-20
CVE-2023-29463 Pavilion8 Security Misconfiguration Vulnerability — Pavilion8 CWE-287 8.8 High 2023-09-12
CVE-2023-2071 FactoryTalk View Machine Edition Vulnerable to Remote Code Execution — Fa CWE-20 9.8 Critical 2023-09-12
CVE-2023-2917 Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability — ThinManager ThinServer CWE-20 9.8 Critical 2023-08-17
CVE-2023-2915 Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability — ThinManager ThinServer CWE-20 7.5 High 2023-08-17
CVE-2023-2914 Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy — ThinManager ThinServer CWE-20 7.5 High 2023-08-17
CVE-2023-2423 Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service — Armor PowerFlex CWE-682 8.6 High 2023-08-08
CVE-2023-2913 Rockwell Automation ThinManager ThinServer Path Traversal Vulnerability — ThinManager ThinServer CWE-23 7.5 High 2023-07-18
CVE-2023-2263 Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-Service — Kinetix 5700 DC Bus Power Supply Series A CWE-400 7.5 High 2023-07-18

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.