Skip to content
OpenAdvisories

Vendor

Rockwell Automation

317 known vulnerabilities.

Products

Arena 22 Arena® Simulation 18 ThinManager® ThinServer™ 14 FactoryTalk® AssetCentre 12 ArmorStart® LT 11 FactoryTalk® View SE 10 ArmorStart ST 10 RSLinx Classic® 8 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 8 CompactLogix L32E and L35E controllers 8 1788-ENBT FLEXLogix adapter 8 1794-AENTR FLEX I/O EtherNet/IP adapter 8 ControlLogix, CompactLogix, GuardLogix, and SoftLogix 8 CompactLogix and SoftLogix controllers 8 ControlLogix and GuardLogix controllers 8 MicroLogix 8 ControlLogix® 5580 7 GuardLogix 5580 6 ThinManager 5 Compact GuardLogix 5370 controllers 5 Verve Asset Manager 5 Pavilion8® 5 FactoryTalk® View Site Edition 5 Studio 5000 Logix Designer 5 CompactLogix 5380 5 ISaGRAF Runtime 5 CompactLogix® 5480 5 FactoryTalk® Services Platform 4 FactoryTalk Linx 4 ISaGRAF Workbench 4 CompactLogix 5370 4 CompactLogix 5370 L1 controllers 4 CompactLogix 5370 L2 controllers 4 CompactLogix 5370 L3 controllers 4 KEPServer Enterprise 4 FactoryTalk® DataMosaix™ Private Cloud 4 FactoryTalk View Machine Edition 4 FactoryTalk ThinManager 3 ControlLogix® 5580 (1756-L8z) 3 RSLinx Enterprise Software 3
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.0
    CVE-2024-3640 Public exploit

    Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables

    An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threa…

    Rockwell Automation FactoryTalk® Remote Access™ ICS / OT
  • Critical 9.8
    CVE-2023-2917 Public exploit EPSS 72%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.  Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. I…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 7.5
    CVE-2023-2915 Public exploit EPSS 82%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unau…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 7.5
    CVE-2023-27856 Public exploit EPSS 77%

    Rockwell Automation ThinManager ThinServer Path Traversal Download

    In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.e…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Critical 9.8
    CVE-2023-27855 Public exploit EPSS 13%

    Rockwell Automation ThinManager ThinServer Path Traversal Upload

    In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk dri…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Critical 10.0
    CVE-2021-27460 Public exploit

    Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

    Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthentica…

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • High 7.3
    CVE-2020-12028 Public exploit EPSS 53%

    Rockwell Automation FactoryTalk View SE

    In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enab…

    Rockwell Automation FactoryTalk® View SE ICS / OT
  • Medium 4.3
    CVE-2020-12027 Public exploit EPSS 53%

    Rockwell Automation FactoryTalk View SE

    All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts. Rockwell Automation recommends enabling built …

    Rockwell Automation FactoryTalk® View SE ICS / OT
  • Critical 9.0
    CVE-2020-12029 Public exploit EPSS 47%

    Rockwell Automation FactoryTalk View SE

    All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell …

    Rockwell Automation FactoryTalk® View SE ICS / OT