PSIRT@rockwellautomation.com
organization01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS PSIRT@rockwellautomation.com
03
bewertete Schwachstellen (251)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-12656US | — | — | ||
A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communi… | ||||
| CVE-2026-12655US | —OT erhöht | — | ||
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in a… | ||||
| CVE-2026-6071US | — | — | ||
A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and ex… | ||||
| CVE-2024-7956US | —OT erhöht | — | ||
A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user pr… | ||||
| CVE-2024-7953US | —OT erhöht | — | ||
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modif… | ||||
| CVE-2024-7952US | —OT erhöht | — | ||
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If ex… | ||||
| CVE-2026-9637US | — | — | ||
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP me… | ||||
| CVE-2026-9634US | —OT erhöht | — | ||
A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of… | ||||
| CVE-2026-9633US | —OT erhöht | — | ||
A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of… | ||||
| CVE-2026-9625US | — | — | ||
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, re… | ||||
| CVE-2026-9624US | — | — | ||
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, re… | ||||
| CVE-2026-9622US | — | — | ||
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring… | ||||
| CVE-2026-9621US | — | — | ||
A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx®… | ||||
| CVE-2026-16675US | — | — | ||
A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console window… | ||||
| CVE-2026-12663US | —OT erhöht | — | ||
A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary c… | ||||
| CVE-2026-12661US | — | — | ||
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web in… | ||||
| CVE-2025-12768US | — | — | ||
A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution o… | ||||
| CVE-2026-84235US | — | — | ||
A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart… | ||||
| CVE-2026-19472US | — | — | ||
A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This… | ||||
| CVE-2026-19471US | — | — | ||
Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing… | ||||