Skip to content
OpenAdvisories

Vendor

Rockwell Automation

317 known vulnerabilities.

Products

Arena 22 Arena® Simulation 18 ThinManager® ThinServer™ 14 FactoryTalk® AssetCentre 12 ArmorStart® LT 11 FactoryTalk® View SE 10 ArmorStart ST 10 RSLinx Classic® 8 1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 8 CompactLogix L32E and L35E controllers 8 1788-ENBT FLEXLogix adapter 8 1794-AENTR FLEX I/O EtherNet/IP adapter 8 ControlLogix, CompactLogix, GuardLogix, and SoftLogix 8 CompactLogix and SoftLogix controllers 8 ControlLogix and GuardLogix controllers 8 MicroLogix 8 ControlLogix® 5580 7 GuardLogix 5580 6 ThinManager 5 Compact GuardLogix 5370 controllers 5 Verve Asset Manager 5 Pavilion8® 5 FactoryTalk® View Site Edition 5 Studio 5000 Logix Designer 5 CompactLogix 5380 5 ISaGRAF Runtime 5 CompactLogix® 5480 5 FactoryTalk® Services Platform 4 FactoryTalk Linx 4 ISaGRAF Workbench 4 CompactLogix 5370 4 CompactLogix 5370 L1 controllers 4 CompactLogix 5370 L2 controllers 4 CompactLogix 5370 L3 controllers 4 KEPServer Enterprise 4 FactoryTalk® DataMosaix™ Private Cloud 4 FactoryTalk View Machine Edition 4 FactoryTalk ThinManager 3 ControlLogix® 5580 (1756-L8z) 3 RSLinx Enterprise Software 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.0
    CVE-2024-3640 Public exploit

    Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables

    An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threa…

    Rockwell Automation FactoryTalk® Remote Access™ ICS / OT
  • High 7.5
    CVE-2023-2915 Public exploit EPSS 82%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unau…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 7.5
    CVE-2023-27856 Public exploit EPSS 77%

    Rockwell Automation ThinManager ThinServer Path Traversal Download

    In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.e…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 7.3
    CVE-2020-12028 Public exploit EPSS 53%

    Rockwell Automation FactoryTalk View SE

    In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enab…

    Rockwell Automation FactoryTalk® View SE ICS / OT