Skip to content
OpenAdvisories

Vendor

Rockwell Automation

317 known vulnerabilities.

Products

Arena 22 Arena® Simulation 18 ThinManager® ThinServer™ 14 FactoryTalk® AssetCentre 12 ArmorStart® LT 11 FactoryTalk® View SE 10 ArmorStart ST 10 RSLinx Classic® 8 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 8 CompactLogix L32E and L35E controllers 8 1788-ENBT FLEXLogix adapter 8 1794-AENTR FLEX I/O EtherNet/IP adapter 8 ControlLogix, CompactLogix, GuardLogix, and SoftLogix 8 CompactLogix and SoftLogix controllers 8 ControlLogix and GuardLogix controllers 8 MicroLogix 8 ControlLogix® 5580 7 GuardLogix 5580 6 ThinManager 5 Compact GuardLogix 5370 controllers 5 Verve Asset Manager 5 Pavilion8® 5 FactoryTalk® View Site Edition 5 Studio 5000 Logix Designer 5 CompactLogix 5380 5 ISaGRAF Runtime 5 CompactLogix® 5480 5 FactoryTalk® Services Platform 4 FactoryTalk Linx 4 ISaGRAF Workbench 4 CompactLogix 5370 4 CompactLogix 5370 L1 controllers 4 CompactLogix 5370 L2 controllers 4 CompactLogix 5370 L3 controllers 4 KEPServer Enterprise 4 FactoryTalk® DataMosaix™ Private Cloud 4 FactoryTalk View Machine Edition 4 FactoryTalk ThinManager 3 ControlLogix® 5580 (1756-L8z) 3 RSLinx Enterprise Software 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-2917 Public exploit EPSS 72%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.  Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. I…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Critical 9.8
    CVE-2023-27855 Public exploit EPSS 13%

    Rockwell Automation ThinManager ThinServer Path Traversal Upload

    In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk dri…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Critical 10.0
    CVE-2021-27460 Public exploit

    Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

    Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthentica…

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 9.0
    CVE-2020-12029 Public exploit EPSS 47%

    Rockwell Automation FactoryTalk View SE

    All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell …

    Rockwell Automation FactoryTalk® View SE ICS / OT