Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380, CompactLogix 5480, 1756-EN4 Vulnerability : Improper Input Validation 2. RISK...

Rockwell Automation Pavilion8

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Pavilion8 Vulnerabilities : Improper Privilege Management, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Rockwell Automation 5015-U8IHFT

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: 5015-U8IHFT Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service...

Rockwell Automation OptixPanel

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.7 ATTENTION : Exploitable remotely Vendor : Rockwell Automation Equipment : OptixPanel Vulnerability : Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability may allow users to exfiltrate credentials and escalate...

Rockwell Automation ThinManager

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Rockwell Automation Equipment: ThinManager Vulnerability: Externally Controlled Reference to a Resource in Another Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Rockwell Automation FactoryTalk View Site

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk Vulnerability : Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform...

Rockwell Automation AADvance Trusted SIS Workstation

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: AADvance Trusted SIS Workstation Vulnerabilities: Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker executing...

Rockwell Automation Pavilion8 安全漏洞

Rockwell Automation Pavilion8 is a model prediction console from Rockwell Automation. Rockwell Automation Pavilion8 suffers from a path traversal vulnerability that stems from the program failing to properly filter for special elements in the path of a resource or file, which could be exploited b...

Rockwell Automation FactoryTalk View Site Edition 安全漏洞

Rockwell Automation FactoryTalk View Site Edition is an integrated software package from Rockwell Automation, Inc. It is used to develop and run... A remote code execution vulnerability exists in Rockwell Automation FactoryTalk View Site Edition, which can be exploited by an attacker to cause...

Rockwell Automation 5015-U8IHFT 安全漏洞

The Rockwell Automation 5015-U8IHFT is a general purpose module from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation 5015-U8IHFT, which can be exploited by an attacker to cause a denial of service when sending a specially crafted packet to a CIP security...

Rockwell Automation ThinManager 安全漏洞

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager, which can be exploited by...

PT-2024-6220 · Rockwell Automation · Factorytalk Batch View

Name of the Vulnerable Software and Affected Versions: FactoryTalk Batch View affected versions not specified Description: The issue is related to an authentication bypass vulnerability. This vulnerability exists due to shared secrets across accounts, which could allow a threat actor to impersona...

Siemens Automation License Manager Denial of Service Vulnerability

Siemens Automation License Manager is a license manager for Siemens products from Siemens, Germany. A denial of service vulnerability exists in Siemens Automation License Manager, which arises from an affected application failing to properly validate certain fields in incoming network packets on...

PT-2024-6546 · Rockwell Automation · Controllogix/Guardlogix 5580 +1

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix/GuardLogix 5580 versions prior to the fixed version Rockwell Automation CompactLogix/Compact GuardLogix 5380 versions prior to the fixed version Description: A denial-of-service issue exists in Rockwell...

PT-2024-31795 · Rockwell Automation · Rockwell Automation 5015-U8Ihft I/O Module

Name of the Vulnerable Software and Affected Versions: Rockwell Automation 5015-U8IHFT I/O Module affected versions not specified Description: A denial-of-service issue exists due to improper input validation. It occurs when a malformed CIP packet is sent over the network, resulting in a major...

Rockwell Automation CompactLogix 安全漏洞

Rockwell Automation CompactLogix is a family of controllers from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation CompactLogix that stems from a denial of service that can result when specially crafted packets are sent to a CIP security object...

CVE-2024-6077: Improper Input Validation

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover...

CVE-2024-8533: Improper Privilege Management

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges...

PT-2024-6591

Name of the Vulnerable Software and Affected Versions: Rockwell Automation products affected versions not specified Description: A privilege escalation issue exists due to improper default file permissions, allowing users to exfiltrate credentials and escalate privileges. This can be exploited by...

Rockwell Automation FactoryTalk Batch View 安全漏洞

Rockwell Automation FactoryTalk Batch View is a batch view application from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation FactoryTalk Batch View that stems from the inclusion of an authentication bypass vulnerability...