214 matches found
Rockwell Automation ControlLogix Ethernet Modules Insecure Default Initialization of Resource (CVE-2025-7353)
The affected ControlLogix Ethernet modules ship with a web-based debugger WDB agent enabled by default. A remote attacker who can reach the module using a specific IP address can connect to the WDB agent and perform memory dumps, modify memory, and control the execution flow of the module. This...
CVE-2026-9636
CVE-2026-9636 affects Rockwell CompactLogix 5380, ControlLogix 5580, and EN4 communications modules. The issue is in CIP Security certificate revocation handling: the controller may fail to reject certificates signed by intermediates that have been revoked via a CRL, potentially allowing a networ...
CVE-2025-12012
The CVE-2025-12012 entry concerns Rockwell Automation 5380/5480/5580 controllers. A denial-of-service vulnerability could allow a malicious user to write invalid file data to the controller, potentially triggering a major non-recoverable fault (MNRF). The available documents do not specify affect...
CVE-2025-12011
CVE-2025-12011 describes a denial-of-service vulnerability in Rockwell Automation 5370/5570 controllers (CompactLogix/ControlLogix family). The issue allows a remote attacker to load an invalid project, triggering a major non-recoverable fault (MNRF) on the device. Based on the available document...
VulnCheck KEV: CVE-2021-22681
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...
Rockwell Automation ControlLogix
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...
Rockwell Automation ControlLogix Redundancy Enhanced Module security vulnerabilities
Rockwell Automation ControlLogix Redundancy Enhanced Module is a core hardware component of Rockwell Automation. There is a security vulnerability present in the Rockwell Automation ControlLogix Redundancy Enhanced Module, which stems from processing specially crafted inputs. This vulnerability m...
EUVD-2009-0476
Malware in sbrugna...
EUVD-2018-9665
Malware in sbrugna...
EUVD-2020-28138
Malware in sbrugna...
EUVD-2017-15092
Malware in sbrugna...
EUVD-2024-19522
Malicious code in bioql PyPI...
EUVD-2025-24813
Malicious code in bioql PyPI...
EUVD-2024-32079
Malicious code in bioql PyPI...
EUVD-2022-24503
Malicious code in bioql PyPI...
EUVD-2024-47370
Malicious code in bioql PyPI...
EUVD-2024-47249
Malicious code in bioql PyPI...
Rockwell Automation ControlLogix 5580 Null Pointer Dereference (CVE-2025-9166)
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller. This plugin only works with Tenable.ot. Please visit...
CVE-2025-9166 Rockwell Automation ControlLogix® 5580 V35.013 Denial-Of-Service
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller...
CVE-2025-9166 Rockwell Automation ControlLogix® 5580 V35.013 Denial-Of-Service
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller...