Read the docs

Rockwell

Records435All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high280CVSS 7.0–8.9

Exploited now

Rockwell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

435 records

Priority CRITICAL 100KEV

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.6363 Published 2021-03-03 No fix listed CWE-522
Priority CRITICAL 86

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.81828 Published 2023-08-17 No fix listed CWE-20
Priority HIGH 82

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.57544 Published 2010-08-04 No fix listed CWE-863
Priority HIGH 78

A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66341 Published 2019-04-04 No fix listed CWE-121
Priority HIGH 69

All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory.

CVSS 3.1CRITICAL 9.0 Local No auth No interaction EPSS 0.46968 Published 2020-07-20 No fix listed CWE-20
Priority HIGH 67

In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissio…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.53033 Published 2020-07-20 No fix listed CWE-264
Priority HIGH 67

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.42769 Published 2013-01-24 No fix listed CWE-284
Load more
Open these records in search →