Vulnerabilidades em Rockwell Automation

310 resultados
Análise Vexday

O portfólio de vulnerabilidades da Rockwell Automation soma 274 CVEs catalogadas, das quais nenhuma consta no catálogo CISA KEV de explorações ativas — índice abaixo da média geral do catálogo, o que indica menor pressão de exploração confirmada no momento. Ainda assim, a presença de 41 falhas de severidade crítica e o EPSS de 0,7809 associado a CVE-2023-2915 — o valor mais alto observado no conjunto — sinalizam risco probabilístico elevado para essa vulnerabilidade específica, merecendo atenção prioritária nas rotinas de patch. O tipo de falha mais recorrente é CWE-20 (validação imprópria de entrada), padrão que tende a se manifestar de formas variadas em ambientes de tecnologia operacional e requer controles de segmentação e validação em profundidade. Com 7 CVEs surgidas nos últimos 90 dias e ao menos 1 com prova de conceito pública disponível, a superfície de risco permanece ativa e demanda monitoramento contínuo.

CVE-2020-14480MEDIUMDue to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to cerEPSS 0.3%CVE-2024-3640HIGHRockwell Automation FactoryTalk® Remote Access™ has Unquoted ExecutablesEPSS 0.3%CVE-2024-7956HIGHSensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private CloudEPSS 0.3%CVE-2025-7329HIGHRockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting VulnerabilityEPSS 0.3%CVE-2025-7032HIGHRockwell Automation Stack-based Buffer Overflow In Arena® SimulationEPSS 0.3%CVE-2025-7033HIGHRockwell Automation Heap-based Buffer Overflow In Arena® SimulationEPSS 0.3%CVE-2025-7025HIGHRockwell Automation Heap-based Buffer Overflow In Arena® SimulationEPSS 0.3%CVE-2026-19471MEDIUMRockwell Automation ArmorStart® LT Stored Cross-site scriptingEPSS 0.3%CVE-2024-21912HIGHRockwell Automation Arena Simulation vulnerable to out of bounds writeEPSS 0.3%CVE-2024-12175HIGHRockwell Automation Code Execution Vulnerability in ArenaEPSS 0.3%CVE-2023-27854HIGHRockwell Automation Arena® Simulation Out of Bounds Read VulnerabilityEPSS 0.3%CVE-2025-24482HIGHFactoryTalk® View Site Edition - Local Code InjectionEPSS 0.3%CVE-2023-27858HIGHRockwell Automation Arena® Simulation Uninitialized Pointer VulnerabilityEPSS 0.2%CVE-2025-8007HIGHRockwell Automation 1756-ENT2R, EN4TR, EN4TRXT VulnerabilityEPSS 0.2%CVE-2024-6068HIGHInput Validation Vulnerability exists in Arena® Input AnalyzerEPSS 0.2%CVE-2024-11156HIGHRockwell Automation Arena® Out of Bounds Write VulnerabilityEPSS 0.2%CVE-2026-8085HIGHRockwell Automation Arena® - Memory Corruption VulnerabilityEPSS 0.2%CVE-2024-7953HIGHDataEdgePlatform DataMosaix™ Private CloudEPSS 0.2%CVE-2024-21913HIGHRockwell Automation Arena Simulation Vulnerable To Memory CorruptionEPSS 0.2%CVE-2025-14272HIGHRockwell Automation FactoryTalk Analytics PavilionXEPSS 0.2%