Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Rockwell Automation — Vulnerabilities & Security Advisories 304

Browse all 304 CVE security advisories affecting Rockwell Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rockwell Automation specializes in industrial automation and information integration, providing critical control systems for manufacturing and process industries. Its software portfolio, including FactoryTalk and PlantPAx, manages complex operational technology environments, making it a high-value target for threat actors seeking to disrupt industrial infrastructure. Historical vulnerability data reveals a prevalence of remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy components or insufficient input validation in web-based interfaces. Notable incidents include the 2018 discovery of backdoors in FactoryTalk View SE, which allowed unauthorized access to industrial control systems. These vulnerabilities highlight the persistent risk of insecure default configurations and unpatched legacy systems within industrial networks. The sheer volume of recorded CVEs underscores the complexity of securing interconnected OT/IT environments, where updates must balance operational continuity with rigorous security hygiene to prevent catastrophic physical or data breaches.

CVE ID Title CVSS Severity Published
CVE-2025-0498 Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability — FactoryTalk® AssetCentre CWE-522 8.2 - 2025-01-30
CVE-2025-24482 FactoryTalk® View Site Edition - Local Code Injection — FactoryTalk® View Site Edition CWE-94 7.8 - 2025-01-28
CVE-2025-24481 FactoryTalk® View Site Edition - Incorrect Permission Assignment — FactoryTalk® View Site Edition CWE-732 9.8 - 2025-01-28
CVE-2025-24480 FactoryTalk® View Machine Editon - Remote Code Execution — FactoryTalk® View Machine Edition CWE-78 9.8 - 2025-01-28
CVE-2025-24479 FactoryTalk® View Machine Edition - Local Code Injection — FactoryTalk View Machine Edition CWE-863 7.8 - 2025-01-28
CVE-2025-24478 5380/5580 Denial-of-Service Vulnerability — GuardLogix 5580 SIL 3 CWE-755 7.5 - 2025-01-28
CVE-2025-0631 PowerFlex® 755 Credential Exposure Vulnerability — PowerFlex 755 CWE-319 7.5 - 2025-01-28
CVE-2025-0659 Path Traversal and Rockwell Automation Third-party Vulnerability in DataMosaix™ Private Cloud — DataEdgePlatform DataMosaix™ Private Cloud CWE-200 4.9 - 2025-01-28
CVE-2024-11364 Rockwell Automation Third Party Vulnerability in Arena® — Arena® 7.8 - 2024-12-19
CVE-2024-12672 Rockwell Automation Third Party Vulnerability in Arena® — Arena® 9.8 - 2024-12-19
CVE-2024-12175 Rockwell Automation Code Execution Vulnerability in Arena — Arena® 7.8 - 2024-12-19
CVE-2024-11157 Rockwell Automation Third Party Vulnerability in Arena — Arena® 9.8 - 2024-12-19
CVE-2024-12373 Rockwell Automation PowerMonitor™ 1000 Denial of Service — PM1k 1408-BC3A-485 7.5 - 2024-12-18
CVE-2024-12372 Rockwell Automation PowerMonitor™ 1000 Denial of Service — PM1k 1408-BC3A-485 9.8 - 2024-12-18
CVE-2024-12371 Rockwell Automation PowerMonitor™ 1000 Remote Code Execution — PM1k 1408-BC3A-485 8.8 - 2024-12-18
CVE-2024-12130 Rockwell Automation Arena® Out of Bounds Read Vulnerability — Arena® CWE-125 8.4 - 2024-12-05
CVE-2024-11158 Rockwell Automation Arena® Uninitialized Vulnerability — Arena® CWE-665 7.8 - 2024-12-05
CVE-2024-11156 Rockwell Automation Arena® Out of Bounds Write Vulnerability — Arena® CWE-787 8.4 - 2024-12-05
CVE-2024-11155 Rockwell Automation Arena® Use After Free Vulnerability — Arena® CWE-416 7.8 - 2024-12-05
CVE-2024-6068 Input Validation Vulnerability exists in Arena® Input Analyzer — Arena Input Analyzer CWE-1284 7.3 High 2024-11-14
CVE-2024-10945 FactoryTalk® Updater Local Privilege Escalation — FactoryTalk Updater CWE-754 7.3 High 2024-11-12
CVE-2024-10944 FactoryTalk® Updater Remote Code Execution — FactoryTalk Updater CWE-20 8.4 High 2024-11-12
CVE-2024-10943 FactoryTalk® Updater Authentication Bypass — FactoryTalk Updater CWE-922 9.1 Critical 2024-11-12
CVE-2024-37365 FactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path — FactoryTalk View Machine Edition CWE-20 7.3 High 2024-11-12
CVE-2024-10387 Rockwell Automation FactoryTalk ThinManager Denial-of-Service Vulnerability — FactoryTalk ThinManager CWE-125 7.5 High 2024-10-25
CVE-2024-10386 Rockwell Automation FactoryTalk ThinManager Authentication Vulnerability — FactoryTalk ThinManager CWE-306 9.8 Critical 2024-10-25
CVE-2024-6207 Rockwell Automation多款产品 安全漏洞 — ControlLogix® 5580 CWE-20 7.5 High 2024-10-14
CVE-2024-7847 RSLogix™ 5 and RSLogix 500® Remote Code Execution Via VBA Embedded Script — RSLogix 500® CWE-345 7.7 High 2024-10-14
CVE-2024-9412 Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager — Verve® Asset Manager CWE-842 5.3AI Medium AI 2024-10-08
CVE-2024-8626 Logix Controllers Vulnerable to Denial-of-Service Vulnerability — CompactLogix 5380 controllers CWE-400 7.5AI High AI 2024-10-08

This page lists every published CVE security advisory associated with Rockwell Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.