Rockwellautomation vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2019-25276 Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentiallyHigh 8.5 · Feb 4, 2026
• CVE-2022-3158 Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability.High 8.8 · Oct 17, 2022
• CVE-2022-38743 Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability.High 8.8 · Oct 17, 2022
• CVE-2021-33012 Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when tHigh 8.6 · Jul 9, 2021
• CVE-2021-32926 When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, neHigh 7.5 · Jun 3, 2021
• CVE-2021-22659 Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the atHigh 8.6 · Mar 25, 2021
• CVE-2021-22665 Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may High 7.8 · Mar 18, 2021
• CVE-2020-14516 In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm wiCritical 10 · Mar 18, 2021
• CVE-2020-6088 An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003.High 7.5 · Feb 4, 2021
• CVE-2020-13573 A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3.High 7.5 · Jan 7, 2021
• CVE-2020-5807 An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log.High 7.5 · Dec 29, 2020
• CVE-2020-5802 An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCPHigh 7.5 · Dec 29, 2020
• CVE-2020-5801 An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest fHigh 7.5 · Dec 29, 2020
• CVE-2020-6111 An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B High 7.5 · Dec 3, 2020
• CVE-2020-27255 A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.High 7.5 · Nov 25, 2020
• CVE-2020-27253 A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior.High 7.5 · Nov 25, 2020
• CVE-2020-27251 A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.Critical 9.8 · Nov 25, 2020
• CVE-2020-6085 An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003.High 7.5 · Oct 19, 2020
• CVE-2020-6084 An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003.High 7.5 · Oct 19, 2020
• CVE-2020-6087 An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B.High 7.5 · Oct 14, 2020
• CVE-2020-6086 An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B.High 7.5 · Oct 14, 2020
• CVE-2020-6083 An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B.High 7.5 · Oct 14, 2020
• CVE-2020-12033 In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which couHigh 8.8 · Jun 23, 2020
• CVE-2020-12005 FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14High 7.5 · Jun 15, 2020
• CVE-2020-12003 FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14High 7.5 · Jun 15, 2020