Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2025-9368 432ES-IG3 Series A Denial-of-Service Vulnerability — 432ES-IG3 Series A CWE-770 7.5AI High AI 2025-12-09
CVE-2025-12807 FactoryTalk® DataMosaix™ Private Cloud SQL Injection — FactoryTalk® DataMosaix™ Private Cloud CWE-89 8.8AI High AI 2025-12-09
CVE-2025-11918 Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability — Arena® Simulation CWE-121 7.3 - 2025-11-14
CVE-2025-11697 Studio 5000 ® Simulation Interface Local Code Execution — Studio 5000 ® Simulation Interface CWE-200 7.8 - 2025-11-11
CVE-2025-11696 Studio 5000 ® Simulation Interface SSRF — Studio 5000® Simulation Interface™ CWE-22 6.5 - 2025-11-11
CVE-2025-11862 Verve Asset Manager Access Control Vulnerability — Verve Asset Manager CWE-863 8.8 - 2025-11-11
CVE-2025-11085 FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS — FactoryTalk® DataMosaix™ Private Cloud CWE-116 6.1 - 2025-11-11
CVE-2025-11084 FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass — FactoryTalk® DataMosaix™ Private Cloud CWE-1390 7.4 - 2025-11-11
CVE-2025-9178 Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability — 1715-AENTR EtherNet/IP Adapter CWE-787 7.5AI High AI 2025-10-14
CVE-2025-9177 Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability — 1715-AENTR EtherNet/IP Adapter CWE-770 7.5AI High AI 2025-10-14
CVE-2025-7330 Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability — Comms - 1783-NATR CWE-352 7.1AI High AI 2025-10-14
CVE-2025-7329 Rockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting Vulnerability — Comms - 1783-NATR CWE-79 5.4AI Medium AI 2025-10-14
CVE-2025-7328 Rockwell Automation Comms - 1783-NATR Multiple Broken Authentication Vulnerabilities — Comms - 1783-NATR CWE-306 6.8AI Medium AI 2025-10-14
CVE-2025-9067 Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities — FactoryTalk Linx CWE-269 7.8AI High AI 2025-10-14
CVE-2025-9124 Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability — Compact GuardLogix® 5370 CWE-248 7.5AI High AI 2025-10-14
CVE-2025-9068 Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities — FactoryTalk Linx CWE-269 7.8AI High AI 2025-10-14
CVE-2025-9064 Rockwell Automation FactoryTalk View Machine Edition Path Traversal — FactoryTalk View Machine Edition CWE-287 8.1AI High AI 2025-10-14
CVE-2025-9063 Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass — PanelView Plus 7 Performance Series B CWE-287 9.1AI Critical AI 2025-10-14
CVE-2025-9066 Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability — FactoryTalk ViewPoint CWE-20 7.5AI High AI 2025-10-14
CVE-2025-9437 Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability — ArmorStart AOP CWE-755 7.5AI High AI 2025-10-14
CVE-2025-9161 Rockwell Automation FactoryTalk Optix Remote Code Execution Vulnerability — FactoryTalk Optix CWE-77 9.8AI Critical AI 2025-09-09
CVE-2025-7350 Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability — Stratix IOS CWE-74 9.8AI Critical AI 2025-09-09
CVE-2025-9065 Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability — ThinManager CWE-610 9.6AI Critical AI 2025-09-09
CVE-2025-7970 Rockwell Automation FactoryTalk Activation Manager Lack of Encryption Vulnerability — FactoryTalk Activation Manager CWE-306 9.1AI Critical AI 2025-09-09
CVE-2025-9364 Rockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB — FactoryTalk® Analytics™ LogixAI® CWE-497 9.1AI Critical AI 2025-09-09
CVE-2025-9166 Rockwell Automation ControlLogix® 5580 V35.013 Denial-Of-Service — ControlLogix® 5580 CWE-476 7.5AI High AI 2025-09-09
CVE-2025-9160 Rockwell Automation CompactLogix® 5480 Code Execution Vulnerability — CompactLogix® 5480 CWE-306 6.8AI Medium AI 2025-09-09
CVE-2025-8007 Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability — 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT CWE-20 6.5AI Medium AI 2025-09-09
CVE-2025-8008 Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability — 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT CWE-755 7.5AI High AI 2025-09-09
CVE-2025-7693 Rockwell Automation Micro800 Vulnerability — PLC - Micro850 L50E CWE-20 7.5AI High AI 2025-08-18

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.