Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2022-1159

Rockwell Automation Studio 5000 Logix Designer Code Injection

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.

CVSS 3.1 · 7.7 High EPSS 3.5% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5380 Compact Guardlogix 5380 Firmware Compactlogix 5380 and 7 more
CVE-2022-1161

ICSA-22-090-05 Rockwell Automation Logix Controllers

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

CVSS 3.1 · 10 Critical EPSS 5.2% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5370 Compact Guardlogix 5370 Firmware Compact Guardlogix 5380 and 45 more
CVE-2022-1797

Rockwell Automation Logix Controllers Uncontrolled Resource Consumption

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.

CVSS 3.1 · 6.8 Medium EPSS 2.2% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5370 Compact Guardlogix 5370 Firmware Compact Guardlogix 5380 and 15 more
CVE-2022-3157

Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5370 Compact Guardlogix 5370 Firmware Compact Guardlogix 5380 and 9 more
CVE-2022-3752

Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.

CVSS 3.1 · 8.6 High EPSS 1.3% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5380 Compact Guardlogix 5380 Firmware Compactlogix 5380 and 7 more
CVE-2024-5659

Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4 1756-en4 Firmware Compact Guardlogix 5380 and 9 more
CVE-2024-3493

Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4tr 1756-en4tr Firmware Compact Guardlogix 5380 and 13 more
CVE-2024-8626

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4tr 1756-en4tr Firmware Compact Guardlogix 5380 and 9 more
CVE-2024-7507

Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation

CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5380 Firmware Compact Guardlogix 5380 Sil 2 Compact Guardlogix 5380 Sil 2 Firmware and 11 more
CVE-2024-7515

Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation

CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5380 Firmware Compact Guardlogix 5380 Sil 2 Compact Guardlogix 5380 Sil 2 Firmware and 10 more