CVE-2021-22681

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...

RSLogix VBA Code Execution

The vulnerability of RSLogix 5 and RSLogix 500 VBA scripts in software applications is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted RSP/RSS file for the proje...

CVE-2020-6990

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file...

CVE-2020-6980

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol SMTP account data is saved in RSLogix 500, a local attacker with access to a...

RSLogix 500 PLC Unauthorized Access

The vulnerability of the cryptographic function used to protect passwords, the RSLogix 500 software, and the MicroLogix 1100 and MicroLogix 1400 programmable logic controllers is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow...

RSLogix 500 Cryptographic Key Privilege Escalation

The vulnerability of the RSLogix 500 software, the programmable logic controllers MicroLogix 1100, and MicroLogix lies in the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...