Browse CVEs

HIGH 7.8 CVE-2020-14481 The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user … Factorytalk View after 9.0 Fix from $1,9502022-02-24 HIGH 7.1 CVE-2020-14478 A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote conten… Factorytalk Services Platform after 6.11.00 Fix from $1,9502022-02-24 MEDIUM 6.1 CVE-2020-14502 The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious scri… 1734 Aentr Point I\/o Dual Port Network Adaptor Series B Firmware after 5.017 Fix from $1,6002022-02-24 MEDIUM 5.5 CVE-2020-14480 Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain cred… Factorytalk View after 9.0 Fix from $1,6002022-02-24 MEDIUM 5.3 CVE-2020-14504 The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can sen… 1734 Aentr Point I\/o Dual Port Network Adaptor Series B Firmware after 5.017 Fix from $1,6002022-02-24 HIGH 8.6 CVE-2021-33012 Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to f… Micrologix 1100 Firmware Mitigation only Fix from $1,9502021-07-09 HIGH 7.5 CVE-2021-32926 When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the leg… Micro800 Firmware Mitigation only Fix from $1,9502021-06-03 HIGH 8.6 CVE-2021-22659 Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allo… Micrologix 1400 Firmware after 21.6 Fix from $1,9502021-03-25 CRITICAL 10.0 CVE-2020-14516 In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing a… Factorytalk Services Platform Mitigation only Fix from $2,3002021-03-18 HIGH 7.8 CVE-2021-22665 Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited priv… Drivetools Add On Profiles after 5.13 Fix from $1,9502021-03-18 CRITICAL 9.8 CVE-2021-22681 KEVEPSS 61% Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers a… Factorytalk Services Platform after 20 Fix from $2,3002021-03-03 HIGH 7.5 CVE-2020-6088 An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.0… Flex Io 1794 Aent\/b Firmware No fix yet Fix from $1,9502021-02-04 HIGH 7.5 CVE-2020-13573 A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A speci… Rslinx No fix yet Fix from $1,9502021-01-07 HIGH 7.5 CVE-2020-5801EPSS 25% An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::Hand… Factorytalk Linx after 6.11 Fix from $1,9502020-12-29 HIGH 7.5 CVE-2020-5802EPSS 39% An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems mes… Factorytalk Linx after 6.11 Fix from $1,9502020-12-29 HIGH 7.5 CVE-2020-5807EPSS 34% An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. … Factorytalk Diagnostics after 6.11 Fix from $1,9502020-12-29 MEDIUM 5.5 CVE-2020-5806 An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messa… Factorytalk Linx after 6.11 Fix from $1,6002020-12-29 HIGH 7.5 CVE-2020-6111 An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller System… Micrologix 1100 B Firmware Mitigation only Fix from $1,9502020-12-03 CRITICAL 9.8 CVE-2020-27251EPSS 5% A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacke… Factorytalk Linx after 6.11 Fix from $2,3002020-11-26 HIGH 7.5 CVE-2020-27253 A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticat… Factorytalk Linx after 6.11 Fix from $1,9502020-11-26 HIGH 7.5 CVE-2020-27255 A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a remote, unauthenticated attacke… Factorytalk Linx after 6.11 Fix from $1,9502020-11-26 HIGH 7.5 CVE-2020-6084 An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.0… Flex I\/o 1794 Aent No fix yet Fix from $1,9502020-10-19 HIGH 7.5 CVE-2020-6085 An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.0… Flex I\/o 1794 Aent No fix yet Fix from $1,9502020-10-19 HIGH 7.5 CVE-2020-6083 An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A spe… Allen Bradley Flex Io 1794 Aent\/b Firmware No fix yet Fix from $1,9502020-10-14 HIGH 7.5 CVE-2020-6086 An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A spe… Flex I\/o 1794 Aent\/b Firmware No fix yet Fix from $1,9502020-10-14 HIGH 7.5 CVE-2020-6087 An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A spe… Flex I\/o 1794 Aent\/b Firmware No fix yet Fix from $1,9502020-10-14 HIGH 8.1 CVE-2020-12028EPSS 53% In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the re… Factorytalk View No fix yet Fix from $1,9502020-07-20 HIGH 7.8 CVE-2020-12031 In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker m… Factorytalk View Mitigation only Fix from $1,9502020-07-20 HIGH 7.8 CVE-2020-12029EPSS 47% All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be… Factorytalk View No fix yet Fix from $1,9502020-07-20 HIGH 8.8 CVE-2020-12033 In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers… Factorytalk Services Platform Mitigation only Fix from $1,9502020-06-23