Browse CVEs

HIGH 7.8 CVE-2025-7033 A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of … Arena 16.20.10+ Fix from $1,9502025-08-05 HIGH 7.8 CVE-2025-6376 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the b… Arena 16.20.09+ Fix from $1,9502025-07-09 HIGH 7.8 CVE-2025-6377 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena Simulation to write beyond the b… Arena 16.20.09+ Fix from $1,9502025-07-09 HIGH 7.8 CVE-2025-3617 A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary f… Thinmanager 14.0.2+ Fix from $1,9502025-04-15 MEDIUM 5.5 CVE-2025-3618 A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory alloca… Thinmanager 11.2.11 / 12.0.9+ Fix from $1,6002025-04-15 HIGH 7.8 CVE-2025-3288 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memor… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-3289 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of impr… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-3285 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memor… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-3286 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memor… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-3287 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of impr… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-2829 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memo… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-2285 A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper valida… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-2286 A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper valida… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-2287 A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper valida… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-2288 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memo… Arena 16.20.09+ Fix from $1,9502025-04-08 HIGH 7.8 CVE-2025-2293 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memo… Arena 16.20.09+ Fix from $1,9502025-04-08 CRITICAL 9.8 CVE-2025-0498 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists du… Factorytalk Assetcentre 15.00.01+ Fix from $2,3002025-01-30 CRITICAL 9.8 CVE-2025-0497 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists du… Factorytalk Assetcentre 15.00.01+ Fix from $2,3002025-01-30 CRITICAL 9.8 CVE-2025-0477 An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due … Factorytalk Assetcentre 15.00.01+ Fix from $2,3002025-01-30 HIGH 7.8 CVE-2024-12175 Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file an… Arena 16.20.07+ Fix from $1,9502024-12-19 HIGH 7.3 CVE-2024-11157 A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memo… Arena 16.20.07+ Fix from $1,9502024-12-19 HIGH 7.3 CVE-2024-11364 Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE… Arena Mitigation only Fix from $1,9502024-12-19 HIGH 7.3 CVE-2024-12672 A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memo… Arena after 16.20.07 Fix from $1,9502024-12-19 HIGH 7.8 CVE-2024-11156 An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond th… Arena after 16.20.03 Fix from $1,9502024-12-05 HIGH 7.8 CVE-2024-12130 An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file a… Arena after 16.20.03 Fix from $1,9502024-12-05 MEDIUM 6.7 CVE-2024-11158 An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE … Arena after 16.20.00 Fix from $1,6002024-12-05 HIGH 7.8 CVE-2024-11155 A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and for… Arena 16.20.06+ Fix from $1,9502024-12-05 HIGH 7.8 CVE-2024-37365 A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory all… Factorytalk View Mitigation only Fix from $1,9502024-11-12 HIGH 7.5 CVE-2024-10387EPSS 8% CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network … Thinmanager 11.2.10 / 12.0.8+ Fix from $1,9502024-10-25 CRITICAL 9.8 CVE-2024-10386EPSS 19% CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network ac… Thinmanager 11.2.10 / 12.0.8+ Fix from $2,3002024-10-25