Vulnerabilidades em Rockwell Automation

310 resultados
Análise Vexday

O portfólio de vulnerabilidades da Rockwell Automation soma 274 CVEs catalogadas, das quais nenhuma consta no catálogo CISA KEV de explorações ativas — índice abaixo da média geral do catálogo, o que indica menor pressão de exploração confirmada no momento. Ainda assim, a presença de 41 falhas de severidade crítica e o EPSS de 0,7809 associado a CVE-2023-2915 — o valor mais alto observado no conjunto — sinalizam risco probabilístico elevado para essa vulnerabilidade específica, merecendo atenção prioritária nas rotinas de patch. O tipo de falha mais recorrente é CWE-20 (validação imprópria de entrada), padrão que tende a se manifestar de formas variadas em ambientes de tecnologia operacional e requer controles de segmentação e validação em profundidade. Com 7 CVEs surgidas nos últimos 90 dias e ao menos 1 com prova de conceito pública disponível, a superfície de risco permanece ativa e demanda monitoramento contínuo.

CVE-2024-2424HIGHRockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable FaultEPSS 2.6%CVE-2021-32960HIGHRockwell Automation FactoryTalk Services Platform Protection Mechanism FailureEPSS 2.4%CVE-2024-5989CRITICALRockwell Automation ThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.4%CVE-2023-2913HIGHRockwell Automation ThinManager ThinServer Path Traversal VulnerabilityEPSS 2.4%CVE-2020-6998MEDIUMRockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input ValidationEPSS 2.3%CVE-2024-5990HIGHThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.3%CVE-2022-1018MEDIUMICSA-22-088-01 Rockwell Automation ISaGRAFEPSS 2.2%CVE-2024-6089HIGHRockwell Automation Major nonrecoverable fault in 5015 – AENFTXTEPSS 2.1%CVE-2022-1797MEDIUMRockwell Automation Logix Controllers Uncontrolled Resource ConsumptionEPSS 2.1%CVE-2024-6436HIGHRockwell Automation Input Validation Vulnerability exists in the SequenceManager™ ServerEPSS 2.1%CVE-2025-3618HIGHLocal Privilege Escalation VulnerabilityEPSS 1.8%CVE-2020-25178HIGHRockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive InformationEPSS 1.7%CVE-2024-7513HIGHRockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File PermissionsEPSS 1.7%CVE-2021-27474CRITICALRockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous FunctionEPSS 1.6%CVE-2023-29463HIGHPavilion8 Security Misconfiguration VulnerabilityEPSS 1.5%CVE-2022-3157HIGHRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackEPSS 1.4%CVE-2023-2262CRITICALRockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer OverflowEPSS 1.3%CVE-2024-45824CRITICALFactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input ValidationEPSS 1.3%CVE-2024-8533HIGHRockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File PermissionsEPSS 1.3%CVE-2020-14504MEDIUMThe web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attackeEPSS 1.3%