Vulnerabilities

A denial-of-service security issue exists in the affected product and version.

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials.

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the cur…

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects.

A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it.

A data exposure vulnerability exists in the affected product.

A security issue exists within the Redundancy Module Configuration Tool.

A security issue exists within the Redundancy Module Configuration Tool.

A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.

A security issue exists within FactoryTalk® Historian Machine Edition.

A denial-of-service security issue exists within RSLinx® Classic.

A denial-of-service security issue exists within RSLinx® Classic.

A denial-of-service security issue exists within RSLinx® Classic.

A denial-of-service security issue exists within RSLinx® Classic.

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory.

A denial-of-service security issue exists in the affected Logix platforms listed in the table above.

A privilege escalation security issue exists within FactoryTalk® Activation Manager.

A denial-of-service security issue exists in the affected product.

A denial-of-service security issue exists within ArmorStart® LT.

Multiple stored cross-site scripting security issues exist within ArmorStart® LT.

A security issue exists within OTTO® Fleet Manager.

A denial-of-service security issue exists in the affected products.

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration.

A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling.

A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file.