目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Rockwell Automation 厂商漏洞列表 / CVE 中文分析 304

Rockwell Automation 厂商相关 304 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

罗克韦尔自动化专注于工业自动化与信息技术解决方案，其工业控制系统广泛应用于制造业。历史漏洞多涉及远程代码执行、身份验证绕过及跨站脚本，常因默认配置不当或补丁滞后引发风险。2021年爆发的“工业供应链攻击”事件凸显其生态脆弱性，攻击者利用软件更新机制植入恶意代码。建议用户严格实施网络隔离、及时更新固件，并启用多因素认证以缓解潜在威胁。

Top products by Rockwell Automation: Arena® ArmorStart® LT Arena Simulation ArmorStart ST FactoryTalk AssetCentre ThinManager ThinServer 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules Arena® Simulation ThinManager® ThinServer™ FactoryTalk View SE ISaGRAF Runtime FactoryTalk® View SE ControlLogix® 5580 RSLinx Classic RSLinx Classic® Pavilion8® Studio 5000 Logix Designer FactoryTalk® DataMosaix™ Private Cloud Verve Asset Manager RSLinx Enterprise Software ThinManager FactoryTalk ThinManager FactoryTalk Updater FactoryTalk System Services FactoryTalk View Machine Edition PM1k 1408-BC3A-485 FactoryTalk® AssetCentre DataEdgePlatform DataMosaix™ Private Cloud ISaGRAF Workbench Comms - 1783-NATR
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-3596 Rockwell Automation 1756 缓冲区错误漏洞 — 1756-EN4TR Series A CWE-787 7.5 High 2023-07-12
CVE-2023-3595 Rockwell Automation 1756 EN2和1756 EN3 缓冲区错误漏洞 — 1756-EN2T Series A, B, C CWE-787 9.8 Critical 2023-07-12
CVE-2023-2746 Rockwell Automation Enhanced HIM 跨站请求伪造漏洞 — Enhanced HIM CWE-352 9.6 Critical 2023-07-11
CVE-2023-2072 Rockwell Automation Allen-Bradley PowerMonitor 1000 跨站脚本漏洞 — PowerMonitor 1000 CWE-787 8.8 High 2023-07-11
CVE-2023-2778 Rockwell Automation FactoryTalk Transaction Manager 资源管理错误漏洞 — FactoryTalk Transaction Manager CWE-400 7.5 High 2023-06-13
CVE-2023-2639 Rockwell Automation FactoryTalk Services Platform 访问控制错误漏洞 — FactoryTalk System Services CWE-346 4.1 Medium 2023-06-13
CVE-2023-2638 Rockwell Automation FactoryTalk Services Platform 授权问题漏洞 — FactoryTalk System Services CWE-287 5.9 Medium 2023-06-13
CVE-2023-2637 Rockwell Automation FactoryTalk Services Platform 信任管理问题漏洞 — FactoryTalk System Services CWE-321 7.3 High 2023-06-13
CVE-2023-2444 Rockwell Automation FactoryTalk Vantagepoint 跨站请求伪造漏洞 — FactoryTalk Vantagepoint 7.1 High 2023-05-11
CVE-2023-2443 Rockwell Automation ThinManager 加密问题漏洞 — ThinManager 7.5 High 2023-05-11
CVE-2023-1834 Rockwell Automation Kinetix 5500 安全漏洞 — Kinetix 5500 EtherNet/IP Servo Drive CWE-284 9.4 Critical 2023-05-11
CVE-2023-29022 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29029 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29028 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29027 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29026 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-20 4.7 Medium 2023-05-11
CVE-2023-29025 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 4.7 Medium 2023-05-11
CVE-2023-29024 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 5.5 Medium 2023-05-11
CVE-2023-29023 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 7.0 High 2023-05-11
CVE-2023-29030 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 7.0 High 2023-05-11
CVE-2023-29031 Rockwell Automation ArmorStart ST 跨站脚本漏洞 — ArmorStart ST CWE-79 7.0 High 2023-05-11
CVE-2023-29462 Rockwell Automation Arena Simulation Software 缓冲区错误漏洞 — Arena Simulation CWE-787 7.8 High 2023-05-09
CVE-2023-29461 Rockwell Automation Arena Simulation Software 缓冲区错误漏洞 — Arena Simulation CWE-125 7.8 High 2023-05-09
CVE-2023-29460 Rockwell Automation Arena Simulation Software 缓冲区错误漏洞 — Arena Simulation CWE-125 7.8 High 2023-05-09
CVE-2023-27857 Rockwell Automation ThinManager ThinServer 缓冲区错误漏洞 — ThinManager ThinServer CWE-125 7.5 High 2023-03-22
CVE-2023-27856 Rockwell Automation ThinManager 路径遍历漏洞 — ThinManager ThinServer CWE-22 7.5 High 2023-03-21
CVE-2023-27855 Rockwell Automation ThinManager 路径遍历漏洞 — ThinManager ThinServer CWE-22 9.8 Critical 2023-03-21
CVE-2023-0027 Rockwell Automation Modbus TCP AOI 信息泄露漏洞 — Modbus TCP Server Add On Instructions CWE-200 5.3 Medium 2023-03-17
CVE-2022-3156 Rockwell Automation Studio 5000 Logix Designer 授权问题漏洞 — Studio 5000 Logix Emulate CWE-287 7.8 High 2022-12-27
CVE-2022-3752 Rockwell Automation CompactLogix 5370 输入验证错误漏洞 — CompactLogix 5480 CWE-20 8.6 High 2022-12-19

本页汇总了 Rockwell Automation 厂商截至目前公开的全部 304 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。