Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2020-25176 Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal — ISaGRAF Runtime CWE-23 9.1 Critical 2022-03-18
CVE-2020-25178 Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information — ISaGRAF Runtime CWE-319 7.5 High 2022-03-18
CVE-2020-25182 Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element — ISaGRAF Runtime CWE-427 6.7 Medium 2022-03-18
CVE-2020-14480 Rockwell Automation FactoryTalk View SE 安全漏洞 — FactoryTalk View SE CWE-312 7.1 - 2022-02-24
CVE-2020-14481 Rockwell Automation FactoryTalk View SE 加密问题漏洞 — FactoryTalk View SE CWE-261 7.8 - 2022-02-24
CVE-2020-14478 IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611 — FactoryTalk Services Platform CWE-611 7.1 - 2022-02-24
CVE-2020-14502 Rockwell Automation 1734-AENTR 跨站脚本漏洞 — 1734-AENTR CWE-79 6.1 - 2022-02-24
CVE-2020-14504 Rockwell Automation 1734-AENTR 授权问题漏洞 — 1734-AENTR CWE-284 7.5 - 2022-02-24
CVE-2020-12028 Rockwell Automation FactoryTalk View SE — FactoryTalk View SE CWE-264 7.3 High 2020-07-20
CVE-2020-12027 Rockwell Automation FactoryTalk View SE — FactoryTalk View SE CWE-200 4.3 Medium 2020-07-20
CVE-2020-12031 Rockwell Automation FactoryTalk View SE — FactoryTalk View SE CWE-119 7.5 High 2020-07-20
CVE-2020-12029 Rockwell Automation FactoryTalk View SE — FactoryTalk View SE CWE-20 9.0 Critical 2020-07-20
CVE-2019-10952 Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption — CompactLogix 5370 L1 controllers CWE-400 9.8 - 2019-05-01
CVE-2019-10954 Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow — CompactLogix 5370 L1 controllers CWE-121 7.5 - 2019-05-01
CVE-2019-10955 多款Rockwell Automation产品输入验证错误漏洞 — MicroLogix 1400 Controllers CWE-601 6.1 - 2019-04-25
CVE-2019-6553 Rockwell Automation RSLinx Classic 缓冲区错误漏洞 — RSLinx Classic CWE-121 9.8 - 2019-04-04
CVE-2010-5305 Rockwell PLC5/SLC5/0x/RSLogix Credentials management — PLC5 CWE-255 9.8 - 2019-03-26
CVE-2013-2805 Rockwell Automation RSLinx Enterprise 缓冲区错误漏洞 — RSLinx Enterprise Software CWE-125 7.5 - 2019-03-26
CVE-2013-2806 Rockwell Automation RSLinx Enterprise 输入验证错误漏洞 — RSLinx Enterprise Software CWE-190 7.5 - 2019-03-26
CVE-2013-2807 Rockwell Automation RSLinx Enterprise 缓冲区错误漏洞 — RSLinx Enterprise Software CWE-190 7.5 - 2019-03-26
CVE-2018-14821 Rockwell Automation RSLinx Classic 安全漏洞 — RSLinx Classic CWE-122 7.5 - 2018-09-20
CVE-2018-14827 Rockwell Automation RSLinx Classic 安全漏洞 — RSLinx Classic CWE-400 7.5 - 2018-09-20
CVE-2018-14829 Rockwell Automation RSLinx Classic 安全漏洞 — RSLinx Classic CWE-121 9.8 - 2018-09-20
CVE-2017-6015 Rockwell Automation FactoryTalk Activation 安全漏洞 — FactoryTalk Activation CWE-428 7.8 - 2018-05-11
CVE-2014-5410 Rockwell Automation Micrologix 1400 Improper Input Validation — Allen-Bradley MicroLogix 1400 CWE-20 7.5 - 2014-10-03
CVE-2014-0755 Rockwell RSLogix 5000 Insufficiently Protected Credentials — RSLogix 5000 software CWE-522 7.1 - 2014-02-05
CVE-2012-6435 Rockwell Automation ControlLogix PLC Improper Access Control — 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules CWE-284 9.8 - 2013-01-24
CVE-2012-6436 Rockwell Automation ControlLogix PLC Improper Input Validation — 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules CWE-119 9.8 - 2013-01-24
CVE-2012-6437 Rockwell Automation ControlLogix PLC Improper Authentication — 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules CWE-287 9.8 - 2013-01-24
CVE-2012-6438 Rockwell Automation ControlLogix PLC Improper Input Validation — 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules CWE-119 9.8 - 2013-01-24

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.