Browse CVEs

CRITICAL 9.8 CVE-2020-12001EPSS 12% FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:… Factorytalk Linx after 4.11.00 Fix from $2,3002020-06-15 HIGH 8.1 CVE-2020-11999 FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:… Factorytalk Linx after 4.11.00 Fix from $1,9502020-06-15 HIGH 7.5 CVE-2020-12003EPSS 5% FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:… Factorytalk Linx after 4.11.00 Fix from $1,9502020-06-15 HIGH 7.5 CVE-2020-12005 FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:… Factorytalk Linx after 4.11.00 Fix from $1,9502020-06-15 HIGH 8.2 CVE-2020-12034 Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and … Eds Subsystem after 32.0 Fix from $1,9502020-05-20 MEDIUM 5.5 CVE-2020-12038 Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and … Eds Subsystem after 32.0 Fix from $1,6002020-05-19 HIGH 7.8 CVE-2020-10642 In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to th… Rslinx Classic after 4.11.00 Fix from $1,9502020-04-13 CRITICAL 9.8 CVE-2020-6967EPSS 5% In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics ex… Factorytalk Services Platform Mitigation only Fix from $2,3002020-03-23 CRITICAL 9.8 CVE-2020-6990 Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix… Micrologix 1400 A Firmware after 21.001 Fix from $2,3002020-03-16 HIGH 7.5 CVE-2020-6984 Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix… Micrologix 1400 A Firmware after 21.001 Fix from $1,9502020-03-16 HIGH 7.5 CVE-2020-6988 Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix… Micrologix 1400 A Firmware after 21.001 Fix from $1,9502020-03-16 HIGH 7.8 CVE-2019-13519EPSS 6% A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may r… Arena after 16.00.00 Fix from $1,9502020-01-27 HIGH 7.8 CVE-2019-13521EPSS 6% A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may r… Arena after 16.00.00 Fix from $1,9502020-01-27 HIGH 7.8 CVE-2019-13527EPSS 5% In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspect… Arena after 16.00.00 Fix from $1,9502019-09-24 HIGH 7.8 CVE-2019-13510EPSS 12% Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened… Arena after 16.00.00 Fix from $1,9502019-08-15 CRITICAL 9.8 CVE-2019-10970 In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a r… Panelview 5510 Firmware 4.003 / 5.002+ Fix from $2,3002019-07-11 CRITICAL 9.8 CVE-2019-10952EPSS 10% An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based… Compactlogix 5370 L1 Firmware after 30.014 Fix from $2,3002019-05-01 HIGH 7.5 CVE-2019-10954EPSS 6% An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state … Compactlogix 5370 L1 Firmware after 30.014 Fix from $1,9502019-05-01 MEDIUM 6.1 CVE-2019-10955 In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earli… Micrologix 1400 A Firmware after 30.014 Fix from $1,6002019-04-25 CRITICAL 9.8 CVE-2018-19282EPSS 6% Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial P… Powerflex 525 Ac Drives Firmware after 5.001 Fix from $2,3002019-04-04 CRITICAL 9.8 CVE-2019-6553EPSS 50% A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classi… Rslinx after 4.10.00 Fix from $2,3002019-04-04 HIGH 7.5 CVE-2018-19016 Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.00… Ethernet\/ip Web Server Module 1756 Eweb after 5.001 Fix from $1,9502019-03-27 CRITICAL 9.8 CVE-2010-5305EPSS 6% The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5… Rslogix Mitigation only Fix from $2,3002019-03-26 HIGH 7.5 CVE-2013-2805 Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 doe… Rslinx Enterprise Mitigation only Fix from $1,9502019-03-26 HIGH 7.5 CVE-2013-2806 Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 doe… Rslinx Enterprise Mitigation only Fix from $1,9502019-03-26 HIGH 7.5 CVE-2013-2807 Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 doe… Rslinx Enterprise Mitigation only Fix from $1,9502019-03-26 HIGH 7.5 CVE-2018-18981 In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to servi… Factorytalk Services Platform after 2.90 Fix from $1,9502019-01-24 HIGH 8.1 CVE-2018-19616EPSS 30% An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because ac… Powermonitor 1000 Firmware No fix yet Fix from $1,9502018-12-26 MEDIUM 6.1 CVE-2018-19615 Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted user’s web browser … Powermonitor 1000 Firmware No fix yet Fix from $1,6002018-12-26 HIGH 8.6 CVE-2018-17924 Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP… Micrologix 1400 Firmware after 10.10 Fix from $1,9502018-12-07