# cve.now: Rockwell Automation

The newest entries naming Rockwell Automation as an affected vendor (up to 200), of 312 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-12656](https://cve.now/CVE-2026-12656.md): 1732E ArmorBlock® - Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2026-12655](https://cve.now/CVE-2026-12655.md): 1732E ArmorBlock® - Multiple Vulnerabilities (CVSS 8.8)
- [CVE-2026-6071](https://cve.now/CVE-2026-6071.md): Code Execution Vulnerability in Arena® (CVSS 7.5)
- [CVE-2024-7956](https://cve.now/CVE-2024-7956.md): Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud (CVSS 7.6)
- [CVE-2024-7953](https://cve.now/CVE-2024-7953.md): DataEdgePlatform DataMosaix™ Private Cloud (CVSS 8.7)
- [CVE-2024-7952](https://cve.now/CVE-2024-7952.md): DataEdgePlatform DataMosaix™ Private Cloud (CVSS 8.7)
- [CVE-2026-9634](https://cve.now/CVE-2026-9634.md): Redundancy Module Configuration Tool - Multiple Vulnerabilities (CVSS 7.0)
- [CVE-2026-9633](https://cve.now/CVE-2026-9633.md): Redundancy Module Configuration Tool - Multiple Vulnerabilities (CVSS 7.0)
- [CVE-2026-12661](https://cve.now/CVE-2026-12661.md): FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability (CVSS 4.8)
- [CVE-2025-12768](https://cve.now/CVE-2025-12768.md): FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability (CVSS 8.6)
- [CVE-2026-9625](https://cve.now/CVE-2026-9625.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2026-9624](https://cve.now/CVE-2026-9624.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2026-9622](https://cve.now/CVE-2026-9622.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2026-9621](https://cve.now/CVE-2026-9621.md): RSLinx Classic® - Multiple Vulnerabilities (CVSS 9.2)
- [CVE-2026-12663](https://cve.now/CVE-2026-12663.md): ControlFLASH ® – Improper Access Control (CVSS 7.0)
- [CVE-2026-9637](https://cve.now/CVE-2026-9637.md): CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2026-16675](https://cve.now/CVE-2026-16675.md): Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation (CVSS 8.5)
- [CVE-2026-84235](https://cve.now/CVE-2026-84235.md): Rockwell Automation 1756-ENBT Denial of Service Vulnerability (CVSS 8.7)
- [CVE-2026-19472](https://cve.now/CVE-2026-19472.md): Rockwell Automation ArmorStart® LT Denial Of Service (CVSS 8.7)
- [CVE-2026-19471](https://cve.now/CVE-2026-19471.md): Rockwell Automation ArmorStart® LT Stored Cross-site scripting (CVSS 6.9)
- [CVE-2026-75112](https://cve.now/CVE-2026-75112.md): OTTO® Fleet Manager – Weak Password Hashing Configuration (CVSS 6.9)
- [CVE-2026-12659](https://cve.now/CVE-2026-12659.md): Rockwell Automation Flex 5000® Adapter - Denial of Service (CVSS 8.7)
- [CVE-2026-9128](https://cve.now/CVE-2026-9128.md): Studio 5000 Logix Designer® – Multiple Vulnerabilities (CVSS 7.3)
- [CVE-2026-9636](https://cve.now/CVE-2026-9636.md): Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability (CVSS 8.2)
- [CVE-2026-9127](https://cve.now/CVE-2026-9127.md): Studio 5000 Logix Designer® – Multiple Vulnerabilities (CVSS 7.3)
- [CVE-2026-9108](https://cve.now/CVE-2026-9108.md): Studio 5000 Logix Designer® – Multiple Vulnerabilities (CVSS 5.4)
- [CVE-2026-11917](https://cve.now/CVE-2026-11917.md): ThinManager® - Path Traversal via API (CVSS 7.2)
- [CVE-2026-9292](https://cve.now/CVE-2026-9292.md): Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting (CVSS 8.4)
- [CVE-2025-11698](https://cve.now/CVE-2025-11698.md): CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow (CVSS 9.2)
- [CVE-2025-12012](https://cve.now/CVE-2025-12012.md): CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow (CVSS 9.2)
- [CVE-2025-12011](https://cve.now/CVE-2025-12011.md): CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow (CVSS 9.2)
- [CVE-2026-10714](https://cve.now/CVE-2026-10714.md): Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass (CVSS 8.8)
- [CVE-2026-9653](https://cve.now/CVE-2026-9653.md): 1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID (CVSS 8.7)
- [CVE-2026-10573](https://cve.now/CVE-2026-10573.md): 1734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object (CVSS 6.3)
- [CVE-2026-9140](https://cve.now/CVE-2026-9140.md): 1718-AENTR/1719-AENTR - Denial of Service (CVSS 8.7)
- [CVE-2026-8314](https://cve.now/CVE-2026-8314.md): Rockwell Automation Arena® - Memory Corruption Vulnerability (CVSS 7.0)
- [CVE-2026-8313](https://cve.now/CVE-2026-8313.md): Rockwell Automation Arena® - Memory Corruption Vulnerability (CVSS 7.0)
- [CVE-2026-8085](https://cve.now/CVE-2026-8085.md): Rockwell Automation Arena® - Memory Corruption Vulnerability (CVSS 7.0)
- [CVE-2026-0647](https://cve.now/CVE-2026-0647.md): Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities (CVSS 8.8)
- [CVE-2026-0646](https://cve.now/CVE-2026-0646.md): Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2025-14272](https://cve.now/CVE-2025-14272.md): Rockwell Automation FactoryTalk Analytics PavilionX (CVSS 8.3)
- [CVE-2025-13036](https://cve.now/CVE-2025-13036.md): Rockwell Automation FactoryTalk Historian Site Edition - Authentication Bypass (CVSS 9.2)
- [CVE-2026-9307](https://cve.now/CVE-2026-9307.md): Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities (CVSS 6.3)
- [CVE-2025-11694](https://cve.now/CVE-2025-11694.md): Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities (CVSS 8.7)
- [CVE-2026-11317](https://cve.now/CVE-2026-11317.md): Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP (CVSS 8.7)
- [CVE-2025-9283](https://cve.now/CVE-2025-9283.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-9282](https://cve.now/CVE-2025-9282.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-9281](https://cve.now/CVE-2025-9281.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-9280](https://cve.now/CVE-2025-9280.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-14027](https://cve.now/CVE-2025-14027.md): Rockwell Automation Recommends Upgrading From 1756-RM2 XT To 1756-RM3 XT (CVSS 8.7)
- [CVE-2025-9279](https://cve.now/CVE-2025-9279.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-9278](https://cve.now/CVE-2025-9278.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-9466](https://cve.now/CVE-2025-9466.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-11743](https://cve.now/CVE-2025-11743.md): Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability (CVSS 7.1)
- [CVE-2025-9465](https://cve.now/CVE-2025-9465.md): ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-9464](https://cve.now/CVE-2025-9464.md): Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities (CVSS 8.7)
- [CVE-2025-14377](https://cve.now/CVE-2025-14377.md): Verve Asset Manager – Plaintext Storage Vulnerabilities (CVSS 8.8)
- [CVE-2025-14376](https://cve.now/CVE-2025-14376.md): Verve Asset Manager – Plaintext Storage Vulnerabilities (CVSS 8.6)
- [CVE-2025-13824](https://cve.now/CVE-2025-13824.md): Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities (CVSS 8.7)
- [CVE-2025-13823](https://cve.now/CVE-2025-13823.md): Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities (CVSS 7.1)
- [CVE-2025-9368](https://cve.now/CVE-2025-9368.md): 432ES-IG3 Series A Denial-of-Service Vulnerability (CVSS 8.7)
- [CVE-2025-12807](https://cve.now/CVE-2025-12807.md): FactoryTalk® DataMosaix™ Private Cloud SQL Injection (CVSS 8.7)
- [CVE-2025-11918](https://cve.now/CVE-2025-11918.md): Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability (CVSS 7.1)
- [CVE-2025-11697](https://cve.now/CVE-2025-11697.md): Studio 5000 ® Simulation Interface Local Code Execution (CVSS 8.9)
- [CVE-2025-11696](https://cve.now/CVE-2025-11696.md): Studio 5000 ® Simulation Interface SSRF (CVSS 8.9)
- [CVE-2025-11862](https://cve.now/CVE-2025-11862.md): Verve Asset Manager Access Control Vulnerability (CVSS 8.4)
- [CVE-2025-11085](https://cve.now/CVE-2025-11085.md): FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS (CVSS 8.6)
- [CVE-2025-11084](https://cve.now/CVE-2025-11084.md): FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass (CVSS 7.6)
- [CVE-2025-9178](https://cve.now/CVE-2025-9178.md): Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability (CVSS 7.7)
- [CVE-2025-9177](https://cve.now/CVE-2025-9177.md): Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability (CVSS 7.7)
- [CVE-2025-7330](https://cve.now/CVE-2025-7330.md): Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability (CVSS 7.0)
- [CVE-2025-7329](https://cve.now/CVE-2025-7329.md): Rockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting Vulnerability (CVSS 8.5)
- [CVE-2025-7328](https://cve.now/CVE-2025-7328.md): Rockwell Automation Comms - 1783-NATR Multiple Broken Authentication Vulnerabilities (CVSS 9.9)
- [CVE-2025-9067](https://cve.now/CVE-2025-9067.md): Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities (CVSS 8.5)
- [CVE-2025-9124](https://cve.now/CVE-2025-9124.md): Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability (CVSS 8.7)
- [CVE-2025-9068](https://cve.now/CVE-2025-9068.md): Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities (CVSS 8.5)
- [CVE-2025-9064](https://cve.now/CVE-2025-9064.md): Rockwell Automation FactoryTalk View Machine Edition Path Traversal (CVSS 8.7)
- [CVE-2025-9063](https://cve.now/CVE-2025-9063.md): Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass (CVSS 7.0)
- [CVE-2025-9066](https://cve.now/CVE-2025-9066.md): Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability (CVSS 8.7)
- [CVE-2025-9437](https://cve.now/CVE-2025-9437.md): Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability (CVSS 8.7)
- [CVE-2025-9161](https://cve.now/CVE-2025-9161.md): Rockwell Automation FactoryTalk Optix Remote Code Execution Vulnerability (CVSS 7.3)
- [CVE-2025-7350](https://cve.now/CVE-2025-7350.md): Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability (CVSS 8.6)
- [CVE-2025-9065](https://cve.now/CVE-2025-9065.md): Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability (CVSS 8.6)
- [CVE-2025-7970](https://cve.now/CVE-2025-7970.md): Rockwell Automation FactoryTalk Activation Manager Lack of Encryption Vulnerability (CVSS 8.7)
- [CVE-2025-9364](https://cve.now/CVE-2025-9364.md): Rockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB (CVSS 8.7)
- [CVE-2025-9166](https://cve.now/CVE-2025-9166.md): Rockwell Automation ControlLogix® 5580 V35.013 Denial-Of-Service (CVSS 8.2)
- [CVE-2025-9160](https://cve.now/CVE-2025-9160.md): Rockwell Automation CompactLogix® 5480 Code Execution Vulnerability (CVSS 7.0)
- [CVE-2025-8007](https://cve.now/CVE-2025-8007.md): Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability (CVSS 7.1)
- [CVE-2025-8008](https://cve.now/CVE-2025-8008.md): Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability (CVSS 7.1)
- [CVE-2025-7693](https://cve.now/CVE-2025-7693.md): Rockwell Automation Micro800 Vulnerability (CVSS 9.3)
- [CVE-2025-7971](https://cve.now/CVE-2025-7971.md): Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability (CVSS 7.3)
- [CVE-2025-7972](https://cve.now/CVE-2025-7972.md): Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability (CVSS 8.4)
- [CVE-2025-9042](https://cve.now/CVE-2025-9042.md): Rockwell Automation FLEX 5000 I/O - Module Fault (CVSS 8.7)
- [CVE-2025-9041](https://cve.now/CVE-2025-9041.md): Rockwell Automation FLEX 5000 I/O - Module Fault (CVSS 8.7)
- [CVE-2025-7973](https://cve.now/CVE-2025-7973.md): Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability (CVSS 8.5)
- [CVE-2025-7773](https://cve.now/CVE-2025-7773.md): Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities (CVSS 8.8)
- [CVE-2025-7774](https://cve.now/CVE-2025-7774.md): Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities (CVSS 8.8)
- [CVE-2025-9036](https://cve.now/CVE-2025-9036.md): Rockwell Automation FactoryTalk® Action Manager v1.0.0 Runtime Vulnerability (CVSS 8.5)
- [CVE-2025-7353](https://cve.now/CVE-2025-7353.md): Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability (CVSS 9.3)
- [CVE-2025-7033](https://cve.now/CVE-2025-7033.md): Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation (CVSS 8.4)
- [CVE-2025-7032](https://cve.now/CVE-2025-7032.md): Rockwell Automation Stack-based Buffer Overflow In Arena® Simulation (CVSS 8.4)
- [CVE-2025-7025](https://cve.now/CVE-2025-7025.md): Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation (CVSS 8.4)
- [CVE-2025-6376](https://cve.now/CVE-2025-6376.md): Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.1)
- [CVE-2025-6377](https://cve.now/CVE-2025-6377.md): Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.1)
- [CVE-2025-3618](https://cve.now/CVE-2025-3618.md): Local Privilege Escalation Vulnerability (CVSS 8.5)
- [CVE-2025-3617](https://cve.now/CVE-2025-3617.md): Local Privilege Escalation in ThinManager® (CVSS 8.5)
- [CVE-2025-3289](https://cve.now/CVE-2025-3289.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-3288](https://cve.now/CVE-2025-3288.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-3287](https://cve.now/CVE-2025-3287.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-3286](https://cve.now/CVE-2025-3286.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-3285](https://cve.now/CVE-2025-3285.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-2829](https://cve.now/CVE-2025-2829.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-2293](https://cve.now/CVE-2025-2293.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-2288](https://cve.now/CVE-2025-2288.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-2287](https://cve.now/CVE-2025-2287.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-2286](https://cve.now/CVE-2025-2286.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-2285](https://cve.now/CVE-2025-2285.md): Local Code Execution Vulnerability in Arena® (CVSS 8.5)
- [CVE-2025-1449](https://cve.now/CVE-2025-1449.md): Admin Shell Access Vulnerability in Rockwell Automation Verve Asset Manager (CVSS 7.5)
- [CVE-2025-0477](https://cve.now/CVE-2025-0477.md): Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability (CVSS 9.3)
- [CVE-2025-0497](https://cve.now/CVE-2025-0497.md): Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability (CVSS 7.3)
- [CVE-2025-0498](https://cve.now/CVE-2025-0498.md): Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability (CVSS 7.0)
- [CVE-2025-24482](https://cve.now/CVE-2025-24482.md): FactoryTalk® View Site Edition - Local Code Injection (CVSS 7.0)
- [CVE-2025-24481](https://cve.now/CVE-2025-24481.md): FactoryTalk® View Site Edition - Incorrect Permission Assignment (CVSS 7.0)
- [CVE-2025-24480](https://cve.now/CVE-2025-24480.md): FactoryTalk® View Machine Editon - Remote Code Execution (CVSS 9.3)
- [CVE-2025-24479](https://cve.now/CVE-2025-24479.md): FactoryTalk® View Machine Edition - Local Code Injection (CVSS 8.6)
- [CVE-2025-24478](https://cve.now/CVE-2025-24478.md): 5380/5580 Denial-of-Service Vulnerability (CVSS 7.1)
- [CVE-2025-0631](https://cve.now/CVE-2025-0631.md): PowerFlex® 755 Credential Exposure Vulnerability (CVSS 8.7)
- [CVE-2025-0659](https://cve.now/CVE-2025-0659.md): Path Traversal and Rockwell Automation Third-party Vulnerability in DataMosaix™ Private Cloud (CVSS 7.0)
- [CVE-2024-11364](https://cve.now/CVE-2024-11364.md): Rockwell Automation Third Party Vulnerability in Arena® (CVSS 8.5)
- [CVE-2024-12672](https://cve.now/CVE-2024-12672.md): Rockwell Automation Third Party Vulnerability in Arena® (CVSS 8.5)
- [CVE-2024-12175](https://cve.now/CVE-2024-12175.md): Rockwell Automation Code Execution Vulnerability in Arena (CVSS 8.5)
- [CVE-2024-11157](https://cve.now/CVE-2024-11157.md): Rockwell Automation Third Party Vulnerability in Arena (CVSS 8.5)
- [CVE-2024-12373](https://cve.now/CVE-2024-12373.md): Rockwell Automation PowerMonitor™ 1000 Denial of Service (CVSS 9.3)
- [CVE-2024-12372](https://cve.now/CVE-2024-12372.md): Rockwell Automation PowerMonitor™ 1000 Denial of Service (CVSS 9.3)
- [CVE-2024-12371](https://cve.now/CVE-2024-12371.md): Rockwell Automation PowerMonitor™ 1000 Remote Code Execution (CVSS 9.3)
- [CVE-2024-12130](https://cve.now/CVE-2024-12130.md): Rockwell Automation Arena® Out of Bounds Read Vulnerability (CVSS 8.5)
- [CVE-2024-11158](https://cve.now/CVE-2024-11158.md): Rockwell Automation Arena® Uninitialized Vulnerability (CVSS 8.5)
- [CVE-2024-11156](https://cve.now/CVE-2024-11156.md): Rockwell Automation Arena® Out of Bounds Write Vulnerability (CVSS 8.5)
- [CVE-2024-11155](https://cve.now/CVE-2024-11155.md): Rockwell Automation Arena® Use After Free Vulnerability (CVSS 8.5)
- [CVE-2024-6068](https://cve.now/CVE-2024-6068.md): Input Validation Vulnerability exists in Arena® Input Analyzer (CVSS 7.0)
- [CVE-2024-10945](https://cve.now/CVE-2024-10945.md): FactoryTalk® Updater Local Privilege Escalation (CVSS 7.0)
- [CVE-2024-10944](https://cve.now/CVE-2024-10944.md): FactoryTalk® Updater Remote Code Execution (CVSS 7.1)
- [CVE-2024-10943](https://cve.now/CVE-2024-10943.md): FactoryTalk® Updater Authentication Bypass (CVSS 9.1)
- [CVE-2024-37365](https://cve.now/CVE-2024-37365.md): FactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path (CVSS 7.3)
- [CVE-2024-10387](https://cve.now/CVE-2024-10387.md): Rockwell Automation FactoryTalk ThinManager Denial-of-Service Vulnerability (CVSS 8.7)
- [CVE-2024-10386](https://cve.now/CVE-2024-10386.md): Rockwell Automation FactoryTalk ThinManager Authentication Vulnerability (CVSS 9.3)
- [CVE-2024-6207](https://cve.now/CVE-2024-6207.md): CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted (CVSS 8.7)
- [CVE-2024-7847](https://cve.now/CVE-2024-7847.md): RSLogix™ 5 and RSLogix 500® Remote Code Execution Via VBA Embedded Script (CVSS 8.8)
- [CVE-2024-9412](https://cve.now/CVE-2024-9412.md): Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager (CVSS 8.4)
- [CVE-2024-8626](https://cve.now/CVE-2024-8626.md): Logix Controllers Vulnerable to Denial-of-Service Vulnerability (CVSS 8.7)
- [CVE-2024-9124](https://cve.now/CVE-2024-9124.md): Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability (CVSS 8.2)
- [CVE-2024-6436](https://cve.now/CVE-2024-6436.md): Rockwell Automation Input Validation Vulnerability exists in the SequenceManager™ Server (CVSS 8.7)
- [CVE-2024-7961](https://cve.now/CVE-2024-7961.md): Rockwell Automation Path Traversal Vulnerability in Pavilion8® (CVSS 8.6)
- [CVE-2024-7960](https://cve.now/CVE-2024-7960.md): Rockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8® (CVSS 8.8)
- [CVE-2024-8533](https://cve.now/CVE-2024-8533.md): Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions (CVSS 7.7)
- [CVE-2024-6077](https://cve.now/CVE-2024-6077.md): Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP (CVSS 8.7)
- [CVE-2024-45826](https://cve.now/CVE-2024-45826.md): ThinManager® Code Execution Vulnerability (CVSS 8.5)
- [CVE-2024-45825](https://cve.now/CVE-2024-45825.md): 5015-U8IHFT Denial-of-Service Vulnerability via CIP Message (CVSS 8.7)
- [CVE-2024-45823](https://cve.now/CVE-2024-45823.md): FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets (CVSS 9.2)
- [CVE-2024-45824](https://cve.now/CVE-2024-45824.md): FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation (CVSS 9.2)
- [CVE-2024-7988](https://cve.now/CVE-2024-7988.md): ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities (CVSS 9.3)
- [CVE-2024-7987](https://cve.now/CVE-2024-7987.md): Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities (CVSS 8.5)
- [CVE-2024-7986](https://cve.now/CVE-2024-7986.md): Rockwell Automation ThinManager® ThinServer™ Information Disclosure (CVSS 6.8)
- [CVE-2024-40620](https://cve.now/CVE-2024-40620.md): Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol (CVSS 5.3)
- [CVE-2024-40619](https://cve.now/CVE-2024-40619.md): Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling (CVSS 8.7)
- [CVE-2024-7513](https://cve.now/CVE-2024-7513.md): Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions (CVSS 8.5)
- [CVE-2024-6078](https://cve.now/CVE-2024-6078.md): Rockwell Automation Authentication Bypass Vulnerability in DataMosaix™ (CVSS 8.6)
- [CVE-2024-7515](https://cve.now/CVE-2024-7515.md): Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation (CVSS 8.7)
- [CVE-2024-7507](https://cve.now/CVE-2024-7507.md): Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation (CVSS 8.7)
- [CVE-2024-7567](https://cve.now/CVE-2024-7567.md): Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port (CVSS 6.9)
- [CVE-2024-6079](https://cve.now/CVE-2024-6079.md): DLL Hijacking Vulnerability Exists in Rockwell Automation Emulate3D™ (CVSS 5.4)
- [CVE-2024-6242](https://cve.now/CVE-2024-6242.md): Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices (CVSS 7.3)
- [CVE-2024-6089](https://cve.now/CVE-2024-6089.md): Rockwell Automation Major nonrecoverable fault in 5015 – AENFTXT (CVSS 8.7)
- [CVE-2024-6326](https://cve.now/CVE-2024-6326.md): Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services (CVSS 1.8)
- [CVE-2024-6325](https://cve.now/CVE-2024-6325.md): Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services (CVSS 6.0)
- [CVE-2024-6435](https://cve.now/CVE-2024-6435.md): Rockwell Automation Privilege Escalation Vulnerability in Pavilion8® (CVSS 8.7)
- [CVE-2024-5990](https://cve.now/CVE-2024-5990.md): ThinManager® ThinServer™ Improper Input Validation Vulnerability (CVSS 8.7)
- [CVE-2024-5989](https://cve.now/CVE-2024-5989.md): Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability (CVSS 9.3)
- [CVE-2024-5988](https://cve.now/CVE-2024-5988.md): Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability (CVSS 9.3)
- [CVE-2024-37369](https://cve.now/CVE-2024-37369.md): Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions (CVSS 8.5)
- [CVE-2024-5659](https://cve.now/CVE-2024-5659.md): Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers (CVSS 8.3)
- [CVE-2024-37368](https://cve.now/CVE-2024-37368.md): Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction (CVSS 8.2)
- [CVE-2024-37367](https://cve.now/CVE-2024-37367.md): Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction (CVSS 8.2)
- [CVE-2024-3640](https://cve.now/CVE-2024-3640.md): Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables (CVSS 7.0)
- [CVE-2024-4609](https://cve.now/CVE-2024-4609.md): Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability (CVSS 8.8)
- [CVE-2024-2424](https://cve.now/CVE-2024-2424.md): Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault (CVSS 7.5)
- [CVE-2024-3493](https://cve.now/CVE-2024-3493.md): Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value (CVSS 8.6)
- [CVE-2024-2929](https://cve.now/CVE-2024-2929.md): Rockwell Automation Arena Simulation Vulnerable To Memory Corruption (CVSS 7.8)
- [CVE-2024-21920](https://cve.now/CVE-2024-21920.md): Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow (CVSS 4.4)
- [CVE-2024-21919](https://cve.now/CVE-2024-21919.md): Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer (CVSS 7.8)
- [CVE-2024-21918](https://cve.now/CVE-2024-21918.md): Rockwell Automation Arena Simulation Vulnerable To Memory Corruption (CVSS 7.8)
- [CVE-2024-21913](https://cve.now/CVE-2024-21913.md): Rockwell Automation Arena Simulation Vulnerable To Memory Corruption (CVSS 7.8)
- [CVE-2024-21912](https://cve.now/CVE-2024-21912.md): Rockwell Automation Arena Simulation vulnerable to out of bounds write (CVSS 7.8)
- [CVE-2024-21914](https://cve.now/CVE-2024-21914.md): Rockwell Automation - FactoryTalk® View ME on PanelView™ Plus 7 Boot Terminal lack Security Protections (CVSS 5.3)
- [CVE-2024-2427](https://cve.now/CVE-2024-2427.md): Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 (CVSS 7.5)
- [CVE-2024-2426](https://cve.now/CVE-2024-2426.md): Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 (CVSS 7.5)
- [CVE-2024-2425](https://cve.now/CVE-2024-2425.md): Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 (CVSS 7.5)
- [CVE-2024-21915](https://cve.now/CVE-2024-21915.md): Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality (CVSS 9.0)
- [CVE-2024-21916](https://cve.now/CVE-2024-21916.md): Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller (CVSS 8.6)
- [CVE-2024-21917](https://cve.now/CVE-2024-21917.md): Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/rockwell-automation
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.