Browse CVEs

HIGH 7.5 CVE-2012-6438EPSS 27% The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP,… Controllogix Controllers after 1400 Fix from $1,9502013-01-24 HIGH 7.5 CVE-2012-6442EPSS 36% When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or P… Ethernet\/ip Firmware Mitigation only Fix from $1,9502013-01-24 MEDIUM 5.0 CVE-2012-6441EPSS 47% An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, … Controllogix Controllers after 1400 Fix from $1,6002013-01-24 HIGH 7.1 CVE-2012-4690 Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when … Ab Micrologix Controller Mitigation only Fix from $1,9502012-12-08 MEDIUM 5.0 CVE-2012-0221EPSS 10% The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does no… Factorytalk Mitigation only Fix from $1,6002012-04-02 MEDIUM 5.0 CVE-2012-0222 The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows … Factorytalk Mitigation only Fix from $1,6002012-04-02 MEDIUM 5.0 CVE-2011-3489EPSS 9% RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafte… Rslogix after 19 Fix from $1,6002011-09-16 MEDIUM 6.9 CVE-2011-2957 Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary co… Factorytalk Diagnostics Viewer after 2.10.02 Fix from $1,6002011-07-28 HIGH 9.3 CVE-2011-2530EPSS 8% Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLinx Classic before 2.… Rslinx 2.58+ Fix from $1,9502011-06-22 CRITICAL 9.8 CVE-2010-2965EPSS 58% The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3… 1756 Enbt\/a Firmware after 6.9.4.12 Fix from $2,3002010-08-05 HIGH 10.0 CVE-2009-3739 Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged a… Ab Micrologix Controller 1100 Mitigation only Fix from $1,9502010-01-19 MEDIUM 6.8 CVE-2009-0473EPSS 13% Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attacker… Controllogix 1756 Enbt\/a Ethernet\/ Ip Bridge Mitigation only Fix from $1,6002009-02-06 MEDIUM 5.0 CVE-2009-0474EPSS 6% The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page … Controllogix 1756 Enbt\/a Ethernet\/ Ip Bridge Mitigation only Fix from $1,6002009-02-06