Vulnerabilidades em Rockwell Automation

310 resultados
Análise Vexday

O portfólio de vulnerabilidades da Rockwell Automation soma 274 CVEs catalogadas, das quais nenhuma consta no catálogo CISA KEV de explorações ativas — índice abaixo da média geral do catálogo, o que indica menor pressão de exploração confirmada no momento. Ainda assim, a presença de 41 falhas de severidade crítica e o EPSS de 0,7809 associado a CVE-2023-2915 — o valor mais alto observado no conjunto — sinalizam risco probabilístico elevado para essa vulnerabilidade específica, merecendo atenção prioritária nas rotinas de patch. O tipo de falha mais recorrente é CWE-20 (validação imprópria de entrada), padrão que tende a se manifestar de formas variadas em ambientes de tecnologia operacional e requer controles de segmentação e validação em profundidade. Com 7 CVEs surgidas nos últimos 90 dias e ao menos 1 com prova de conceito pública disponível, a superfície de risco permanece ativa e demanda monitoramento contínuo.

CVE-2025-7353CRITICALRockwell Automation ControlLogix® Ethernet Remote Code Execution VulnerabilityEPSS 0.8%CVE-2021-27473MEDIUMRockwell Automation Connected Components Workbench Improper Input ValidationEPSS 0.8%CVE-2025-24480CRITICALFactoryTalk® View Machine Editon - Remote Code ExecutionEPSS 0.7%CVE-2017-6015—Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, wEPSS 0.7%CVE-2024-2427HIGHRockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527EPSS 0.7%CVE-2022-3166HIGHMicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition AttackEPSS 0.7%CVE-2025-8008HIGHRockwell Automation 1756-ENT2R, EN4TR, EN4TRXT VulnerabilityEPSS 0.7%CVE-2023-2443HIGH Rockwell Automation ThinManager product allows the use of medium strength ciphers.  If the client requests an insecure cipher, a malicious EPSS 0.7%CVE-2023-2746CRITICALRockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery AttackEPSS 0.7%CVE-2025-1449HIGHAdmin Shell Access Vulnerability in Rockwell Automation Verve Asset ManagerEPSS 0.7%CVE-2024-21914MEDIUMRockwell Automation - FactoryTalk® View ME on PanelView™ Plus 7 Boot Terminal lack Security ProtectionsEPSS 0.7%CVE-2024-4609HIGHRockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection VulnerabilityEPSS 0.7%CVE-2024-21916HIGHRockwell Automation Denial-of-service Vulnerability in ICE1 ControllerEPSS 0.6%CVE-2025-9466HIGHArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesEPSS 0.6%CVE-2024-3493HIGHRockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header ValueEPSS 0.6%CVE-2025-7350HIGHRockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution VulnerabilityEPSS 0.6%CVE-2023-29027MEDIUMRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting AttackEPSS 0.6%CVE-2023-29029MEDIUMRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting AttackEPSS 0.6%CVE-2023-29022MEDIUMRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting AttackEPSS 0.6%CVE-2023-29025MEDIUMRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting AttackEPSS 0.6%