CVE-2023-2263
Published Jul 18, 2023The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability,…
Vendor archive
rockwellautomation CVEs
Beta · best-effort348 CVEs tagged to vendor rockwellautomation — 76 Critical, 214 High, 52 Medium, 6 Low, 0 Unrated.
CVE-2023-3596
Published Jul 12, 2023Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting…
- evidence mentions
- 5
- Buzz score
- 25.9
CVE-2023-3595
Published Jul 12, 2023Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code exec…
- evidence mentions
- 6
- Buzz score
- 27.5
CVE-2023-2746
Published Jul 11, 2023The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS…
CVE-2023-2072
Published Jul 11, 2023The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges…
CVE-2023-2778
Published Jun 13, 2023A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If e…
CVE-2023-2639
Published Jun 13, 2023The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network doe…
CVE-2023-2638
Published Jun 13, 2023Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe ma…
CVE-2023-2637
Published Jun 13, 2023Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies. Hard-coded cryptographic key may lead to privilege escala…
CVE-2023-2444
Published May 11, 2023A cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk Vantagepoint. This vulnerability can be exploited in two ways. If an attacker sends a malici…
CVE-2023-2443
Published May 11, 2023Rockwell Automation ThinManager product allows the use of medium strength ciphers. If the client requests an insecure cipher, a malicious actor could potentially decrypt traffic…
CVE-2023-1834
Published May 11, 2023Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telnet and FTP ports open by defaul…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-29031
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data…
CVE-2023-29030
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data…
CVE-2023-29029
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and networ…
CVE-2023-29028
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and networ…
CVE-2023-29027
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and networ…
CVE-2023-29026
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and networ…
CVE-2023-29025
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and networ…
CVE-2023-29024
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that could potentially all…
CVE-2023-29023
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-29022
Published May 11, 2023A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and networ…
CVE-2023-29462
Published May 9, 2023An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unautho…
CVE-2023-29461
Published May 9, 2023An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unautho…
CVE-2023-29460
Published May 9, 2023An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unautho…
Showing 126-150 of 348 CVEsPage 6 of 14