Read the docs

Rockwell

Records435All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high280CVSS 7.0–8.9

Exploited now

Rockwell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Compact Guardlogix 5380 Firmware · all components

Priority MEDIUM 57

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.05213 Published 2022-04-11 No fix listed CWE-829
Priority MEDIUM 46

An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a majo…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01302 Published 2022-12-19 No fix listed CWE-20
Priority MEDIUM 44

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00637 Published 2024-04-15 No fix listed CWE-20
Priority MEDIUM 42

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectabl…

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.0345 Published 2022-04-01 No fix listed CWE-94
Priority MEDIUM 41

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0216 Published 2022-05-31 No fix listed CWE-400
Open these records in search →