Vulnerability index

Browse CVEs

313 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Arena HIGH 7.8
CVE-2025-7033

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of …

Fix: 16.20.10+
Fix from $1,950 2025-08-05
Arena HIGH 7.8
CVE-2025-6376

A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the b…

Fix: 16.20.09+
Fix from $1,950 2025-07-09
Arena HIGH 7.8
CVE-2025-6377

A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the b…

Fix: 16.20.09+
Fix from $1,950 2025-07-09
Thinmanager HIGH 7.8
CVE-2025-3617

A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary f…

Fix: 14.0.2+
Fix from $1,950 2025-04-15
Thinmanager MEDIUM 5.5
CVE-2025-3618

A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory alloca…

Fix: 11.2.11 / 12.0.9+
Fix from $1,600 2025-04-15
Arena HIGH 7.8
CVE-2025-3288

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memor…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-3289

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of impr…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-3285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memor…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-3286

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memor…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-3287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of impr…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-2829

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memo…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-2285

A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper valida…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-2286

A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper valida…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-2287

A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper valida…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-2288

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memo…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Arena HIGH 7.8
CVE-2025-2293

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memo…

Fix: 16.20.09+
Fix from $1,950 2025-04-08
Factorytalk Assetcentre CRITICAL 9.8
CVE-2025-0498

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists du…

Fix: 15.00.01+
Fix from $2,300 2025-01-30
Factorytalk Assetcentre CRITICAL 9.8
CVE-2025-0497

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists du…

Fix: 15.00.01+
Fix from $2,300 2025-01-30
Factorytalk Assetcentre CRITICAL 9.8
CVE-2025-0477

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due …

Fix: 15.00.01+
Fix from $2,300 2025-01-30
Arena HIGH 7.8
CVE-2024-12175

Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file an…

Fix: 16.20.07+
Fix from $1,950 2024-12-19
Arena HIGH 7.3
CVE-2024-11157

A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memo…

Fix: 16.20.07+
Fix from $1,950 2024-12-19
Arena HIGH 7.3
CVE-2024-11364

Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE…

Mitigation only
Fix from $1,950 2024-12-19
Arena HIGH 7.3
CVE-2024-12672

A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memo…

Fix: after 16.20.07
Fix from $1,950 2024-12-19
Arena HIGH 7.8
CVE-2024-11156

An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond th…

Fix: after 16.20.03
Fix from $1,950 2024-12-05
Arena HIGH 7.8
CVE-2024-12130

An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file a…

Fix: after 16.20.03
Fix from $1,950 2024-12-05
Arena MEDIUM 6.7
CVE-2024-11158

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE …

Fix: after 16.20.00
Fix from $1,600 2024-12-05
Arena HIGH 7.8
CVE-2024-11155

A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and for…

Fix: 16.20.06+
Fix from $1,950 2024-12-05
Factorytalk View HIGH 7.8
CVE-2024-37365

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory all…

Mitigation only
Fix from $1,950 2024-11-12
Thinmanager HIGH 7.5
CVE-2024-10387EPSS 8%

CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network …

Fix: 11.2.10 / 12.0.8+
Fix from $1,950 2024-10-25
Thinmanager CRITICAL 9.8
CVE-2024-10386EPSS 19%

CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network ac…

Fix: 11.2.10 / 12.0.8+
Fix from $2,300 2024-10-25