https://vulnogram.org/ Most recent CVEs assigned by Rockwell Automation (rockwell). https://vulnogram.org/seaview/icons/rockwell.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-12656 https://vulnogram.org/CVE-2026-12656 A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A powe… High Network Exploitable Tue, 13 Oct 2026 14:12:58 GMT https://vulnogram.org/CVE-2026-12655 https://vulnogram.org/CVE-2026-12655 A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configura… High Network Exploitable Tue, 13 Oct 2026 14:08:36 GMT https://vulnogram.org/CVE-2026-6071 https://vulnogram.org/CVE-2026-6071 A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this… High Network Exploitable Thu, 03 Sep 2026 13:10:28 GMT https://vulnogram.org/CVE-2024-7956 https://vulnogram.org/CVE-2024-7956 A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the pro… High Wed, 02 Sep 2026 14:47:25 GMT https://vulnogram.org/CVE-2024-7953 https://vulnogram.org/CVE-2024-7953 A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project. High Tue, 01 Sep 2026 17:34:48 GMT https://vulnogram.org/CVE-2024-7952 https://vulnogram.org/CVE-2024-7952 A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data. High Network Exploitable Tue, 01 Sep 2026 17:33:57 GMT https://vulnogram.org/CVE-2026-9634 https://vulnogram.org/CVE-2026-9634 A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) user… High Tue, 01 Sep 2026 13:45:49 GMT https://vulnogram.org/CVE-2026-9633 https://vulnogram.org/CVE-2026-9633 A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) use… High Tue, 01 Sep 2026 13:45:15 GMT https://vulnogram.org/CVE-2026-12661 https://vulnogram.org/CVE-2026-12661 A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the dev… Medium Tue, 01 Sep 2026 13:41:53 GMT https://vulnogram.org/CVE-2025-12768 https://vulnogram.org/CVE-2025-12768 A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device. High Tue, 01 Sep 2026 13:40:50 GMT https://vulnogram.org/CVE-2026-9625 https://vulnogram.org/CVE-2026-9625 A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover. High Network Exploitable Tue, 01 Sep 2026 13:36:58 GMT https://vulnogram.org/CVE-2026-9624 https://vulnogram.org/CVE-2026-9624 A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a restart of the service to recover. High Network Exploitable Tue, 01 Sep 2026 13:35:35 GMT https://vulnogram.org/CVE-2026-9622 https://vulnogram.org/CVE-2026-9622 A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover. High Network Exploitable Tue, 01 Sep 2026 13:34:55 GMT https://vulnogram.org/CVE-2026-9621 https://vulnogram.org/CVE-2026-9621 A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recove… Critical Network Exploitable Tue, 01 Sep 2026 13:33:53 GMT https://vulnogram.org/CVE-2026-12663 https://vulnogram.org/CVE-2026-12663 A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run… High Tue, 01 Sep 2026 13:30:42 GMT https://vulnogram.org/CVE-2026-9637 https://vulnogram.org/CVE-2026-9637 A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNR… High Network Exploitable Tue, 01 Sep 2026 13:28:26 GMT https://vulnogram.org/CVE-2026-16675 https://vulnogram.org/CVE-2026-16675 A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operati… High Tue, 01 Sep 2026 13:18:58 GMT https://vulnogram.org/CVE-2026-84235 https://vulnogram.org/CVE-2026-84235 A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover. High Network Exploitable Tue, 01 Sep 2026 13:07:28 GMT https://vulnogram.org/CVE-2026-19472 https://vulnogram.org/CVE-2026-19472 A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability High Network Exploitable Tue, 01 Sep 2026 12:51:29 GMT https://vulnogram.org/CVE-2026-19471 https://vulnogram.org/CVE-2026-19471 Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when oth… Medium Network Exploitable Tue, 01 Sep 2026 12:49:04 GMT https://vulnogram.org/CVE-2026-75112 https://vulnogram.org/CVE-2026-75112 A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offli… Medium Wed, 19 Aug 2026 19:06:52 GMT https://vulnogram.org/CVE-2026-12659 https://vulnogram.org/CVE-2026-12659 A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when processing crafted CIP packets sent to the adapter. A power cycle is required to recover the module and… High Network Exploitable Tue, 14 Jul 2026 15:14:14 GMT https://vulnogram.org/CVE-2026-9128 https://vulnogram.org/CVE-2026-9128 A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because… High Tue, 14 Jul 2026 15:12:49 GMT https://vulnogram.org/CVE-2026-9636 https://vulnogram.org/CVE-2026-9636 A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed… High Network Exploitable Tue, 14 Jul 2026 15:11:42 GMT https://vulnogram.org/CVE-2026-9127 https://vulnogram.org/CVE-2026-9127 A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If… High Tue, 14 Jul 2026 15:10:38 GMT https://vulnogram.org/CVE-2026-9108 https://vulnogram.org/CVE-2026-9108 A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during the project o… Medium Tue, 14 Jul 2026 15:09:37 GMT https://vulnogram.org/CVE-2026-11917 https://vulnogram.org/CVE-2026-11917 A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the API. An authenticated attacker could exploit this vulnerability to write arbitrary files to restrict… High Tue, 14 Jul 2026 15:07:41 GMT https://vulnogram.org/CVE-2026-9292 https://vulnogram.org/CVE-2026-9292 A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high pri… High Tue, 14 Jul 2026 15:05:37 GMT https://vulnogram.org/CVE-2025-11698 https://vulnogram.org/CVE-2025-11698 A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-r… Critical Network Exploitable Tue, 14 Jul 2026 15:05:32 GMT https://vulnogram.org/CVE-2025-12012 https://vulnogram.org/CVE-2025-12012 A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF). Critical Network Exploitable Tue, 14 Jul 2026 15:04:18 GMT https://vulnogram.org/CVE-2025-12011 https://vulnogram.org/CVE-2025-12011 A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF). Critical Network Exploitable Tue, 14 Jul 2026 15:03:11 GMT https://vulnogram.org/CVE-2026-10714 https://vulnogram.org/CVE-2026-10714 A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configu… High Tue, 14 Jul 2026 15:02:09 GMT https://vulnogram.org/CVE-2026-9653 https://vulnogram.org/CVE-2026-9653 A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuousl… High Network Exploitable Tue, 14 Jul 2026 15:00:06 GMT https://vulnogram.org/CVE-2026-10573 https://vulnogram.org/CVE-2026-10573 A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP messages, which can cause the module to enter a faulted state. A restart is required to recover. Medium Network Exploitable Tue, 14 Jul 2026 14:54:39 GMT https://vulnogram.org/CVE-2026-9140 https://vulnogram.org/CVE-2026-9140 A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP unicast network storm, which causes the device to become overloaded and lose communication. A power cycle is required to recover. High Network Exploitable Tue, 14 Jul 2026 14:52:20 GMT https://vulnogram.org/CVE-2026-10577 https://vulnogram.org/CVE-2026-10577 A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interfac… Critical Network Exploitable Tue, 14 Jul 2026 12:52:40 GMT https://vulnogram.org/CVE-2026-8314 https://vulnogram.org/CVE-2026-8314 A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attac… High Tue, 14 Jul 2026 12:47:43 GMT https://vulnogram.org/CVE-2026-8313 https://vulnogram.org/CVE-2026-8313 A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An atta… High Tue, 14 Jul 2026 12:45:35 GMT https://vulnogram.org/CVE-2026-8312 https://vulnogram.org/CVE-2026-8312 A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attac… High Tue, 14 Jul 2026 12:43:09 GMT https://vulnogram.org/CVE-2026-8085 https://vulnogram.org/CVE-2026-8085 A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attac… High Tue, 14 Jul 2026 12:40:43 GMT https://vulnogram.org/CVE-2026-0647 https://vulnogram.org/CVE-2026-0647 An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specif… High Network Exploitable Tue, 16 Jun 2026 14:20:12 GMT https://vulnogram.org/CVE-2026-0646 https://vulnogram.org/CVE-2026-0646 A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a m… High Network Exploitable Tue, 16 Jun 2026 14:19:21 GMT https://vulnogram.org/CVE-2025-14272 https://vulnogram.org/CVE-2025-14272 A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actio… High Network Exploitable Tue, 16 Jun 2026 13:51:27 GMT https://vulnogram.org/CVE-2025-13036 https://vulnogram.org/CVE-2025-13036 An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token. Critical Network Exploitable Tue, 16 Jun 2026 13:50:11 GMT https://vulnogram.org/CVE-2026-9307 https://vulnogram.org/CVE-2026-9307 A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network.… Medium Network Exploitable Tue, 16 Jun 2026 13:42:08 GMT https://vulnogram.org/CVE-2025-11694 https://vulnogram.org/CVE-2025-11694 A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perf… High Network Exploitable Tue, 16 Jun 2026 13:39:46 GMT https://vulnogram.org/CVE-2026-11317 https://vulnogram.org/CVE-2026-11317 A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are more likely to be affected. This can result in a major nonrecoverable… High Network Exploitable Tue, 16 Jun 2026 13:10:19 GMT https://vulnogram.org/CVE-2025-9283 https://vulnogram.org/CVE-2025-9283 A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limits Storms tests, the device reboots unexpectedly, causing the Link State Monitor to go down for seve… High Network Exploitable Tue, 20 Jan 2026 13:59:56 GMT https://vulnogram.org/CVE-2025-9282 https://vulnogram.org/CVE-2025-9282 A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several… High Network Exploitable Tue, 20 Jan 2026 13:59:14 GMT https://vulnogram.org/CVE-2025-9281 https://vulnogram.org/CVE-2025-9281 A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device reboots High Network Exploitable Tue, 20 Jan 2026 13:58:24 GMT