Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2025-12011 CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow — CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570 CWE-120 9.2 Critical 2026-07-14
CVE-2026-10714 Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass — FactoryTalk® Services Platform CWE-1390 - - 2026-07-14
CVE-2026-9653 1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID — 1756-EN2, 1756-EN3 CWE-354 - - 2026-07-14
CVE-2026-10573 1734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object — 1734 POINT I/O CWE-770 6.3 Medium 2026-07-14
CVE-2026-9140 1718-AENTR/1719-AENTR - Denial of Service — 1718-AENTR/1719-AENTR CWE-770 - - 2026-07-14
CVE-2026-8314 Rockwell Automation Arena® - Memory Corruption Vulnerability — Arena® Simulation CWE-787 - - 2026-07-14
CVE-2026-8313 Rockwell Automation Arena® - Memory Corruption Vulnerability — Arena® Simulation CWE-787 - - 2026-07-14
CVE-2026-8085 Rockwell Automation Arena® - Memory Corruption Vulnerability — Arena® Simulation CWE-787 - - 2026-07-14
CVE-2026-0647 Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities — FLEX I/O EtherNet/IP Adapters CWE-306 - - 2026-06-16
CVE-2026-0646 Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities — FLEX I/O EtherNet/IP Adapters CWE-401 - - 2026-06-16
CVE-2025-14272 Rockwell Automation FactoryTalk Analytics PavilionX — FactoryTalk Analytics PavilionX CWE-862 - - 2026-06-16
CVE-2025-13036 Rockwell Automation FactoryTalk Historian Site Edition - Authentication Bypass — FactoryTalk Historian SE CWE-362 - - 2026-06-16
CVE-2026-9307 Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities — CompactLogix 5370 CWE-497 - - 2026-06-16
CVE-2025-11694 Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities — CompactLogix 5370 CWE-354 - - 2026-06-16
CVE-2026-11317 Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP — CompactLogix, ControlLogix CWE-404 - - 2026-06-16
CVE-2025-9283 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-9282 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-9281 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-9280 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-14027 Rockwell Automation Recommends Upgrading From 1756-RM2 XT To 1756-RM3 XT — ControlLogix® Redundancy Enhanced Module CWE-401 7.5AI High AI 2026-01-20
CVE-2025-9279 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-9278 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 6.5AI Medium AI 2026-01-20
CVE-2025-9466 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-11743 Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability — CompactLogix® 5370 CWE-1284 7.5AI High AI 2026-01-20
CVE-2025-9465 ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-9464 Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities — ArmorStart® LT CWE-400 7.5AI High AI 2026-01-20
CVE-2025-14377 Verve Asset Manager – Plaintext Storage Vulnerabilities — Verve Asset Manager CWE-312 5.5AI Medium AI 2026-01-20
CVE-2025-14376 Verve Asset Manager – Plaintext Storage Vulnerabilities — Verve Asset Manager CWE-922 6.5AI Medium AI 2026-01-20
CVE-2025-13824 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities — Micro820®, Micro850®, Micro870® CWE-763 7.5AI High AI 2025-12-15
CVE-2025-13823 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities — Micro820®, Micro850®, Micro870® CWE-1395 7.5AI High AI 2025-12-15

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.