Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2022-3157 Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack — CompactLogix 5370 CWE-20 8.6 High 2022-12-16
CVE-2022-46670 Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack — MicroLogix 1100 & 1400 Controllers CWE-79 7.1 High 2022-12-16
CVE-2022-3166 MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack — MicroLogix 1100 CWE-924 7.5 High 2022-12-16
CVE-2022-38744 FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack — FactoryTalk Alarm and Events Server CWE-287 7.5 High 2022-10-27
CVE-2022-38742 Rockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack — ThinManager ThinServer CWE-122 8.1 High 2022-09-23
CVE-2022-2465 ISaGRAF Workbench Deserialization of Untrusted Data CWE-502 — ISaGRAF Workbench CWE-502 8.6 High 2022-08-25
CVE-2022-2464 ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22 — ISaGRAF Workbench CWE-22 7.7 High 2022-08-25
CVE-2022-2463 ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22 — ISaGRAF Workbench CWE-22 6.1 Medium 2022-08-25
CVE-2020-6998 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation — Armor Compact GuardLogix 5370 controllers 5.8 Medium 2022-07-27
CVE-2022-2179 ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames — MicroLogix 1400 CWE-1021 6.5 Medium 2022-07-20
CVE-2022-1797 Rockwell Automation Logix Controllers Uncontrolled Resource Consumption — CompactLogix 5380 controllers CWE-400 6.8 Medium 2022-05-31
CVE-2022-1118 Rockwell Automation ISaGRAF Deserialization of Untrusted Data — Connected Component Workbench CWE-502 8.6 High 2022-05-17
CVE-2022-1161 ICSA-22-090-05 Rockwell Automation Logix Controllers — 1768 CompactLogix controllers CWE-829 10.0 Critical 2022-04-11
CVE-2022-1159 Rockwell Automation Studio 5000 Logix Designer Code Injection — Studio 5000 Logix Designer CWE-94 7.7 High 2022-04-01
CVE-2022-1018 ICSA-22-088-01 Rockwell Automation ISaGRAF — Connected Component Workbench CWE-611 5.5 Medium 2022-04-01
CVE-2021-32960 Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure — FactoryTalk Services Platform 8.5 High 2022-04-01
CVE-2021-27475 Rockwell Automation Connected Components Workbench Deserialization of Untrusted Data — Connected Components Workbench CWE-502 8.6 High 2022-03-23
CVE-2021-27471 Rockwell Automation Connected Components Workbench Path Traversal — Connected Components Workbench CWE-22 7.7 High 2022-03-23
CVE-2021-27473 Rockwell Automation Connected Components Workbench Improper Input Validation — Connected Components Workbench CWE-22 6.1 Medium 2022-03-23
CVE-2021-27476 Rockwell Automation FactoryTalk AssetCentre OS Command Injection — FactoryTalk AssetCentre CWE-78 10.0 Critical 2022-03-23
CVE-2021-27470 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2021-27466 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2021-27474 Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function — FactoryTalk AssetCentre CWE-676 10.0 Critical 2022-03-23
CVE-2021-27468 Rockwell Automation FactoryTalk AssetCentre SQL Injection — FactoryTalk AssetCentre CWE-89 10.0 Critical 2022-03-23
CVE-2021-27472 Rockwell Automation FactoryTalk AssetCentre SQL Injection — FactoryTalk AssetCentre CWE-89 10.0 Critical 2022-03-23
CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2021-27464 Rockwell Automation FactoryTalk AssetCentre SQL Injection — FactoryTalk AssetCentre CWE-89 10.0 Critical 2022-03-23
CVE-2021-27460 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2020-25180 Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key — ISaGRAF Runtime CWE-321 5.3 Medium 2022-03-18
CVE-2020-25184 Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials — ISaGRAF Runtime CWE-256 7.8 High 2022-03-18

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.