CVE-2009-0473-check

Description Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A. Vulnerability Details https://www.cvedetails.com/cve/CVE-2009-0473/ Requirements Python 2.7 You must be running an X Windows environment before executing this script. It will use Python’s...

Rockwell Automation 1732E ArmorBlock: Resource management error vulnerability

Rockwell Automation’s 1732E ArmorBlock versions 3.012 and earlier have a resource management vulnerability. This vulnerability arises from improper handling of network storm traffic, which can interrupt communications, cause device failures, and affect open TCP and UDP ports. A power-off restart ...

Rockwell Automation 1732E ArmorBlock authorization issue vulnerability

Rockwell Automation’s 1732E ArmorBlock versions 3.012 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authentication when changing the device webserver password. Unverified attackers can modify the password without valid credentials, potentially...

Siman software Code Execution

The vulnerability of the model.exe executable file of the Siman software for discrete event simulation and automation in Rockwell Automation Arena lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious...

Siman Executable Code Execution

The vulnerability of the exprt.exe executable component of the Siman software for discrete event simulation and automation in Rockwell Automation Arena lies in the issue of out-of-buffer writing. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially...

Rockwell Automation ThinManager Arbitrary File Write

The vulnerability of the software interface of Rockwell Automation’s ThinManager platform for centralized application management is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...

Rockwell Automation ArmorStart LT

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the affected page. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

Rockwell Automation ControlFLASH

ADVISORY SUMMARY Successful exploitation of this vulnerability could give an attacker the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...

Rockwell Automation 1756-ENBT Module

ADVISORY SUMMARY Successful exploitation of this vulnerability could crash the module. The device requires a restart to recover. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...

PT-2026-85371

Name of the Vulnerable Software and Affected Versions Rockwell Automation 1756-ENBT affected versions not specified Description A denial-of-service flaw exists in the 1756-ENBT module, which serves as an EtherNet/IP bridge for ControlLogix controllers. An attacker can crash the device by sending ...

CVE-2026-16675

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:13+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-rockwell-automation 2026-10-12 16:46:38+00:00| seen| https://gist.github.com/Piuliss/f7ab88dbcef916f098c658a8896804fe...

CVE-2026-9633

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:11+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-rockwell-automation...

CVE-2026-9634

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-rockwell-automation...

CVE-2026-9637

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-rockwell-automation...

Rockwell Automation RSLinx Classic < 4.60 Multiple Vulnerabilities (SD1794)

The version of Rockwell Automation RSLinx Classic installed on the remote Windows host is 4.50 or prior. It is, therefore, affected by multiple denial of service vulnerabilities: - A denial-of-service security issue exists within RSLinx Classic. The security issue stems from improper handling of ...

CVE-2026-16675 Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows...

CVE-2026-84235

A denial-of-service vulnerability exists in the Rockwell Automation 1756-ENBT CIP Ethernet module. A crafted CIP packet sent to the affected module causes it to crash, rendering the device non-operational until it is restarted. The vulnerability is exploitable over the network with low complexity...

CVE-2026-84235 Rockwell Automation 1756-ENBT Denial of Service Vulnerability

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover...

CVE-2026-84235 Rockwell Automation 1756-ENBT Denial of Service Vulnerability

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover...

CVE-2026-19472

CVE-2026-19472 affects Rockwell Automation ArmorStart® LT , specifically its embedded web server . The root cause is the improper handling of a crafted HTTP PUT request , which leads to a denial-of-service condition and loss of web server availability. The vendor-assigned CVSS 4.0 score is 8.7 (H...