Rockwellautomation

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-5814 1Rockwellautomation 5Rslogix 500 Professional Edition Rslogix 500 Standard EditionRslogix 500 Starter Edition+2 more May 6, 2026 Sep 19, 2016 N/A· v4 8.6 HIGH· v3 9.3 HIGH· v2 Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execu...Show more Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file.Show less
CVE-2016-5645 1Rockwellautomation 61766 L32awa 1766 L32awaa1766 L32bwa+3 more Jun 3, 2026 Aug 24, 2016 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbi...Show more Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community.Show less
CVE-2016-4531 1Rockwellautomation 1Factorytalk Energrymetrix May 6, 2026 Jul 28, 2016 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVE-2016-4522 1Rockwellautomation 1Factorytalk Energrymetrix May 6, 2026 Jul 28, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-2277 1Rockwellautomation 1Integrated Architecture Builder May 6, 2026 Apr 6, 2016 N/A· v4 6.3 MEDIUM· v3 6.9 MEDIUM· v2 IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file.
CVE-2016-2279 1Rockwellautomation 23Compactlogix 1756 En2f Series A Firmware Compactlogix 1756 En2f Series B FirmwareCompactlogix 1756 En2t Series A Firmware+20 more Jun 3, 2026 Mar 2, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-0868 1Rockwellautomation 81763 L16awa Series A 1763 L16awa Series B1763 L16bbb Series A+5 more May 6, 2026 Jan 28, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request.
CVE-2015-6492 1Rockwellautomation 2Micrologix 1100 Firmware Micrologix 1400 Firmware Jun 3, 2026 Oct 28, 2015 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.
CVE-2015-6491 1Rockwellautomation 2Micrologix 1100 Firmware Micrologix 1400 Firmware May 6, 2026 Oct 28, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors.
CVE-2015-6490 1Rockwellautomation 2Micrologix 1100 Firmware Micrologix 1400 Firmware Jun 3, 2026 Oct 28, 2015 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2015-6488 1Rockwellautomation 2Micrologix 1100 Firmware Micrologix 1400 Firmware May 6, 2026 Oct 28, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML...Show more Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2015-6486 1Rockwellautomation 2Micrologix 1100 Firmware Micrologix 1400 Firmware May 6, 2026 Oct 28, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-1010 1Rockwellautomation 1Rsview32 May 6, 2026 May 31, 2015 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earlier does not properly encrypt credentials, which allows local users to obtain sensitive information by reading a file and conducting a decryption attack.
CVE-2014-9204 1Rockwellautomation 1Rslinx May 6, 2026 May 17, 2015 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file.
CVE-2014-9209 1Rockwellautomation 2Factorytalk Services Platform Factorytalk View Studio May 6, 2026 Mar 31, 2015 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileg...Show more Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
CVE-2014-5424 1Rockwellautomation 1Connected Components Workbench May 6, 2026 Nov 14, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an invalid property value to an Acti...Show more Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an invalid property value to an ActiveX control that was built with an outdated compiler.Show less
CVE-2014-5410 1Rockwellautomation 1Ab Micrologix Controller May 6, 2026 Oct 3, 2014 N/A· v4 N/A· v3 7.1 HIGH· v2 The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service...Show more The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed packets over (1) an Ethernet network or (2) a serial line.Show less
CVE-2014-0755 1Rockwellautomation 1Rslogix 5000 Design And Configuration Software Apr 29, 2026 Feb 5, 2014 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via...Show more Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.Show less
CVE-2012-4715 1Rockwellautomation 1Rslinx Enterprise Apr 29, 2026 Apr 18, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon cr...Show more Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a UDP packet with a certain integer length value that is (1) too large or (2) too small, leading to improper handling by Logger.dll.Show less
CVE-2012-4714 1Rockwellautomation 1Factorytalk Services Platform Apr 29, 2026 Apr 18, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denia...Show more Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service (service outage or RNADiagReceiver.exe daemon crash) via UDP data that specifies a large integer value.Show less

Previous 1...14 151617 18 Next