Rockwell

Latest CVEs · RSS

• CVE-2026-12656 2026-10-13 · CVSS 8.7
  A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which c
• CVE-2026-12655 2026-10-13 · CVSS 8.8
  A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. Th
• CVE-2026-6071 2026-09-03 · CVSS 7.5
  A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an all
• CVE-2024-7956 2026-09-02 · CVSS 7.6
  A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor mus
• CVE-2024-7953 2026-09-01 · CVSS 8.7
  A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor
• CVE-2024-7952 2026-09-01 · CVSS 8.7
  A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without a
• CVE-2026-9634 2026-09-01 · CVSS 7.0
  A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL,
• CVE-2026-9633 2026-09-01 · CVSS 7.0
  A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL
• CVE-2026-12661 2026-09-01 · CVSS 4.8
  A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker who is authenticated could send crafted re
• CVE-2025-12768 2026-09-01 · CVSS 8.6
  A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve rem
• CVE-2026-9625 2026-09-01 · CVSS 8.7
  A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic
• CVE-2026-9624 2026-09-01 · CVSS 8.7
  A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data l
• CVE-2026-9622 2026-09-01 · CVSS 8.7
  A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service
• CVE-2026-9621 2026-09-01 · CVSS 9.2
  A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet ca
• CVE-2026-12663 2026-09-01 · CVSS 7.0
  A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This cou
• CVE-2026-9637 2026-09-01 · CVSS 8.7
  A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input
• CVE-2026-16675 2026-09-01 · CVSS 8.5
  A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn vi
• CVE-2026-84235 2026-09-01 · CVSS 8.7
  A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device
• CVE-2026-19472 2026-09-01 · CVSS 8.7
  A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embed
• CVE-2026-19471 2026-09-01 · CVSS 6.9
  Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on t
• CVE-2026-75112 2026-08-19 · CVSS 6.9
  A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implement
• CVE-2026-12659 2026-07-14 · CVSS 8.7
  A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when processing cr
• CVE-2026-9128 2026-07-14 · CVSS 7.3
  A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable pat
• CVE-2026-9636 2026-07-14 · CVSS 8.2
  A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. Th
• CVE-2026-9127 2026-07-14 · CVSS 7.3
  A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any auth