Read the docs

Rockwell

Records435All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high280CVSS 7.0–8.9

Exploited now

Rockwell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

12 records in Compactlogix 5380 Firmware · all components

Priority MEDIUM 57

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.05213 Published 2022-04-11 No fix listed CWE-829
Priority MEDIUM 46

An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a majo…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01302 Published 2022-12-19 No fix listed CWE-20
Priority MEDIUM 44

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00551 Published 2024-10-14 No fix listed CWE-20
Priority MEDIUM 44

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00558 Published 2024-09-12 No fix listed CWE-20
Priority MEDIUM 44

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00637 Published 2024-04-15 No fix listed CWE-20
Priority MEDIUM 42

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectabl…

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.0345 Published 2022-04-01 No fix listed CWE-94
Priority MEDIUM 41

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0216 Published 2022-05-31 No fix listed CWE-400
Priority LOW 31

A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogi…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02633 Published 2017-05-06 No fix listed CWE-400
Open these records in search →