Vulnerabilidades em Rockwell Automation

310 resultados
Análise Vexday

O portfólio de vulnerabilidades da Rockwell Automation soma 274 CVEs catalogadas, das quais nenhuma consta no catálogo CISA KEV de explorações ativas — índice abaixo da média geral do catálogo, o que indica menor pressão de exploração confirmada no momento. Ainda assim, a presença de 41 falhas de severidade crítica e o EPSS de 0,7809 associado a CVE-2023-2915 — o valor mais alto observado no conjunto — sinalizam risco probabilístico elevado para essa vulnerabilidade específica, merecendo atenção prioritária nas rotinas de patch. O tipo de falha mais recorrente é CWE-20 (validação imprópria de entrada), padrão que tende a se manifestar de formas variadas em ambientes de tecnologia operacional e requer controles de segmentação e validação em profundidade. Com 7 CVEs surgidas nos últimos 90 dias e ao menos 1 com prova de conceito pública disponível, a superfície de risco permanece ativa e demanda monitoramento contínuo.

CVE-2026-9292HIGHRockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-8626HIGHLogix Controllers Vulnerable to Denial-of-Service VulnerabilityEPSS 0.5%CVE-2024-7515HIGHRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input ValidationEPSS 0.5%CVE-2024-12373CRITICALRockwell Automation PowerMonitor™ 1000 Denial of ServiceEPSS 0.5%CVE-2024-45825HIGH5015-U8IHFT Denial-of-Service Vulnerability via CIP MessageEPSS 0.5%CVE-2024-9124HIGHRockwell Automation PowerFlex 6000T CIP Security denial-of-service VulnerabilityEPSS 0.5%CVE-2024-10944HIGHFactoryTalk® Updater Remote Code ExecutionEPSS 0.5%CVE-2024-7507HIGHRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input ValidationEPSS 0.5%CVE-2024-37367HIGHRockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication RestrictionEPSS 0.5%CVE-2024-37368HIGHRockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication RestrictionEPSS 0.5%CVE-2025-7972HIGHRockwell Automation FactoryTalk® Linx Network Browser Security Bypass VulnerabilityEPSS 0.5%CVE-2023-29031HIGHRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting AttackEPSS 0.5%CVE-2023-29030HIGHRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting AttackEPSS 0.5%CVE-2023-29023HIGHRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting AttackEPSS 0.5%CVE-2024-6435HIGHRockwell Automation Privilege Escalation Vulnerability in Pavilion8®EPSS 0.5%CVE-2025-9465HIGHArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesEPSS 0.5%CVE-2024-10943CRITICALFactoryTalk® Updater Authentication BypassEPSS 0.5%CVE-2025-9278HIGHArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesEPSS 0.5%CVE-2025-9280HIGHArmorStart® LT - Multiple Denial-of-Service VulnerabilitiesEPSS 0.5%CVE-2025-24478HIGH5380/5580 Denial-of-Service VulnerabilityEPSS 0.5%