Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2023-3596 Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service — 1756-EN4TR Series A CWE-787 7.5 High 2023-07-12
CVE-2023-3595 Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution — 1756-EN2T Series A, B, C CWE-787 9.8 Critical 2023-07-12
CVE-2023-2746 Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery Attack — Enhanced HIM CWE-352 9.6 Critical 2023-07-11
CVE-2023-2072 Rockwell Automation PowerMonitor 1000 Cross-Site Scripting Vulnerability — PowerMonitor 1000 CWE-787 8.8 High 2023-07-11
CVE-2023-2778 Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service — FactoryTalk Transaction Manager CWE-400 7.5 High 2023-06-13
CVE-2023-2639 Rockwell Automation FactoryTalk System Services Vulnerable to Sensitive Information Disclosure — FactoryTalk System Services CWE-346 4.1 Medium 2023-06-13
CVE-2023-2638 Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service Attack — FactoryTalk System Services CWE-287 5.9 Medium 2023-06-13
CVE-2023-2637 Rockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic Key — FactoryTalk System Services CWE-321 7.3 High 2023-06-13
CVE-2023-2444 Rockwell Automation FactoryTalk Vantagepoint 跨站请求伪造漏洞 — FactoryTalk Vantagepoint 7.1 High 2023-05-11
CVE-2023-2443 Rockwell Automation ThinManager 加密问题漏洞 — ThinManager 7.5 High 2023-05-11
CVE-2023-1834 Rockwell Automation Kinetix 5500 Vulnerable to Open Port Exploitation — Kinetix 5500 EtherNet/IP Servo Drive CWE-284 9.4 Critical 2023-05-11
CVE-2023-29022 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29029 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29028 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29027 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29026 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-20 4.7 Medium 2023-05-11
CVE-2023-29025 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29024 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 5.5 Medium 2023-05-11
CVE-2023-29023 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 7.0 High 2023-05-11
CVE-2023-29030 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 7.0 High 2023-05-11
CVE-2023-29031 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack — ArmorStart ST CWE-79 7.0 High 2023-05-11
CVE-2023-29462 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability — Arena Simulation CWE-787 7.8 High 2023-05-09
CVE-2023-29461 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability — Arena Simulation CWE-125 7.8 High 2023-05-09
CVE-2023-29460 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability — Arena Simulation CWE-125 7.8 High 2023-05-09
CVE-2023-27857 Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow — ThinManager ThinServer CWE-125 7.5 High 2023-03-22
CVE-2023-27856 Rockwell Automation ThinManager ThinServer Path Traversal Download — ThinManager ThinServer CWE-22 7.5 High 2023-03-21
CVE-2023-27855 Rockwell Automation ThinManager ThinServer Path Traversal Upload — ThinManager ThinServer CWE-22 9.8 Critical 2023-03-21
CVE-2023-0027 Rockwell Automation Modbus TCP AOI Server Could Leak Sensitive Information — Modbus TCP Server Add On Instructions CWE-200 5.3 Medium 2023-03-17
CVE-2022-3156 Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability — Studio 5000 Logix Emulate CWE-287 7.8 High 2022-12-27
CVE-2022-3752 Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack — CompactLogix 5480 CWE-20 8.6 High 2022-12-19

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.