Rockwell Vulnerabilidad

Cronología

Escribe

Producto

Rockwell Automation ArmorStart ST10
Rockwell Automation MicroLogix 140010
Rockwell Automation MicroLogix 11009
Rockwell Automation FactoryTalk AssetCentre9
Rockwell Automation ThinManager ThinServer8

Contramedidas

Official Fix33
Temporary Fix0
Workaround14
Unavailable0
Not Defined146

Explotabilidad

High1
Functional0
Proof-of-Concept6
Unproven1
Not Defined185

Vector de acceso

Not Defined0
Physical0
Local29
Adjacent8
Network156

Autenticación

Not Defined0
High9
Low45
None139

La interacción del usuario

Not Defined0
Required51
None142

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤47
≤517
≤624
≤741
≤853
≤931
≤1019

CVSSv3 Temp

≤10
≤20
≤31
≤47
≤520
≤624
≤741
≤853
≤928
≤1019

VulDB

≤10
≤20
≤39
≤421
≤514
≤635
≤722
≤857
≤916
≤1019

NVD

≤10
≤20
≤31
≤43
≤54
≤69
≤710
≤833
≤915
≤1025

CNA

≤10
≤20
≤30
≤40
≤58
≤67
≤77
≤834
≤914
≤1018

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k36
<2k84
<5k72
<10k0
<25k0
<50k0
<100k0
≥100k1

Explotar hoy

<1k155
<2k28
<5k9
<10k0
<25k0
<50k1
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (125): 0x (1), 1734-AENTR Series B (2), 1734-AENTR Series C (2), 1747-L5x (1), 1756 ControlLogix Communications Module (1), 1756 EN2 (1), 1756 EN3 (1), 1756-EN4 (1), 1768 CompactLogix (1), 1769 CompactLogix (1), 5000 Logix Designer (4), A Ethernet (3), Ab Micrologix Controller (1), Allen-Bradley CompactLogix 1769-L (1), Arena (2), Arena Simulation (6), Arena Simulation Software (7), Arena Simulation Software Cat. 9502-Ax (1), Armor PowerFlex (1), ArmorStart ST (10), Automation Arena (1), Automation Connected Components Workbench (3), Automation FactoryTalk Activation (1), Automation FactoryTalk Alarms (1), Automation Integrated Architecture Builder (1), Automation PanelView Plus (1), Automation RSLogix Micro Starter Lite (1), Compact GuardLogix (1), Compact GuardLogix 5370 (1), Compact GuardLogix 5380 (2), CompactLogix (1), CompactLogix 1768-EWEB (1), CompactLogix 5370 (2), CompactLogix 5370 L1 (2), CompactLogix 5370 L2 (1), CompactLogix 5370 L3 (1), CompactLogix 5380 (3), CompactLogix 5480 (2), CompactLogix GuardLogix (1), Connected Component Workbench (1), Connected Components Workbench (6), ControlFLASH (4), ControlFLASH Plus (4), ControlLogix (2), ControlLogix 5550 (1), ControlLogix 5560 (1), ControlLogix 5570 (3), ControlLogix 5580 (3), ControlLogix controllers (8), Controllogix 1756-ENBT (3), DriveLogix 5730 (1), DriveTools SP (1), Drives AOP (1), Enhanced HIM (1), EtherNet-IP Web Server Module 1756-EWEB (1), Events (1), FactoryTalk (2), FactoryTalk AssetCentre (9), FactoryTalk Asset Centre (4), FactoryTalk Diagnostics Viewer (1), FactoryTalk EnergyMetrix (2), FactoryTalk Linx (8), FactoryTalk Linx CommDTM (4), FactoryTalk Linx Software (2), FactoryTalk Service Platform (2), FactoryTalk Services Platform (10), FactoryTalk System Services (3), FactoryTalk Transaction Manager (1), FactoryTalk VantagePoint (3), FactoryTalk View ME (1), FactoryTalk View SE (5), FactoryTalk View SEA (1), FactoryTalk View Site Edition (1), Flex IO (1), FlexLogix 1794-L34 (1), GuardLogix (2), GuardLogix 5560 (1), GuardLogix 5570 (2), GuardLogix 5580 (2), IP Bridge (3), ISaGRAF (1), ISaGRAF Runtime (5), ISaGRAF Workbench (4), Kinetix 5500 (1), Kinetix 5700 (1), Logix5000 (1), Logix Controllers (1), Logix Designer Software (2), Logix Designer Studio 5000 (1), Micro800 (1), MicroLogix (3), MicroLogix 1100 (16), MicroLogix 1400 (16), MicroLogix 1400 Controller (1), Modbus TCP Server AOI (1), PLC5 (1), PanelView 5510 (1), PanelView Plus (1), Pavilion8 (1), PowerFlex 525 AC Drives (1), PowerFlex 527 (3), PowerMonitor (1), PowerMonitor 1000 (2), RSLinx Classic (13), RSLinx Enterprise (4), RSLinx Enterprise Software (1), RSLogix 500 (4), RSLogix 500 Professional Edition (1), RSLogix 500 Standard Edition (1), RSLogix 500 Starter Edition (1), RSLogix 1785-Lx (1), RSLogix 5000 (1), RSLogix Micro Developer (1), RSNetWorx Software (2), RSView32 (1), Rslogix 5000 Design And Configuration Software (1), SLC5 (1), Safety Instrumented Systems Workstation (1), SoftLogix 5800 (1), Studio 5000 Launcher (4), Studio 5000 Logix Designer (1), Studio 5000 Logix Emulate (1), ThinManager (1), ThinManager ThinServer (8), select 1756-EN (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConCTIEPSSCVE
2024-03-268.38.3Rockwell Automation Arena Simulation desbordamiento de búferAutomation SoftwareNot DefinedNot Defined0.030.00043CVE-2024-2929
2024-03-268.38.3Rockwell Automation Arena Simulation desbordamiento de búferAutomation SoftwareNot DefinedNot Defined0.000.00043CVE-2024-21913
2024-03-265.45.4Rockwell Automation Arena Simulation divulgación de informaciónAutomation SoftwareNot DefinedNot Defined0.040.00043CVE-2024-21920
2024-03-268.38.3Rockwell Automation Arena Simulation Remote Code ExecutionAutomation SoftwareNot DefinedNot Defined0.000.00043CVE-2024-21919
2024-03-268.38.3Rockwell Automation Arena Simulation desbordamiento de búferAutomation SoftwareNot DefinedNot Defined0.040.00043CVE-2024-21918
2024-03-267.57.5Rockwell Automation Arena Simulation desbordamiento de búferAutomation SoftwareNot DefinedNot Defined0.040.00043CVE-2024-21912
2024-03-265.35.2Rockwell Automation FactoryTalk View ME denegación de servicioAutomation SoftwareNot DefinedOfficial Fix0.050.00043CVE-2024-21914
2024-03-257.57.5Rockwell Automation PowerFlex 527 Data Packet denegación de servicioAutomation SoftwareNot DefinedNot Defined0.030.00043CVE-2024-2427
2024-03-257.57.5Rockwell Automation PowerFlex 527 CIP Communication denegación de servicioAutomation SoftwareNot DefinedNot Defined0.080.00043CVE-2024-2426
2024-03-257.57.5Rockwell Automation PowerFlex 527 denegación de servicioAutomation SoftwareNot DefinedNot Defined0.050.00043CVE-2024-2425
2024-02-168.58.3Rockwell Automation FactoryTalk Service Platform escalada de privilegiosAutomation SoftwareNot DefinedOfficial Fix0.030.00043CVE-2024-21915
2024-01-317.57.5Rockwell Automation FactoryTalk Service Platform FTSP Service autenticación débilAutomation SoftwareNot DefinedOfficial Fix0.030.00072CVE-2024-21917
2024-01-317.97.8Rockwell Automation ControlLogix 5570/GuardLogix 5570 desbordamiento de búferAutomation SoftwareNot DefinedOfficial Fix0.040.00048CVE-2024-21916
2023-10-267.57.3Rockwell Automation FactoryTalk View Site Edition denegación de servicioAutomation SoftwareNot DefinedOfficial Fix0.000.00044CVE-2023-46289
2023-10-268.17.9Rockwell Automation FactoryTalk Services Platform autenticación débilAutomation SoftwareNot DefinedOfficial Fix0.000.00063CVE-2023-46290
2023-10-267.57.4Rockwell Automation Arena Malformed File Local Privilege EscalationAutomation SoftwareNot DefinedOfficial Fix0.000.00049CVE-2023-27858
2023-10-267.57.4Rockwell Automation Arena Malformed File divulgación de informaciónAutomation SoftwareNot DefinedOfficial Fix0.000.00049CVE-2023-27854
2023-10-137.57.5Rockwell Automation PanelView Plus FactoryTalk Linx divulgación de informaciónAutomation SoftwareNot DefinedNot Defined0.060.00070CVE-2023-29464
2023-09-209.89.8Rockwell Automation select 1756-EN CIP Request desbordamiento de búferAutomation SoftwareNot DefinedNot Defined0.030.00138CVE-2023-2262
2023-09-137.77.7Rockwell Automation Pavilion8 JMX Console autenticación débilAutomation SoftwareNot DefinedNot Defined0.000.00045CVE-2023-29463
2023-09-129.89.8Rockwell Automation FactoryTalk escalada de privilegiosAutomation SoftwareNot DefinedNot Defined0.000.00075CVE-2023-2071
2023-08-178.58.5Rockwell Automation ThinManager ThinServer ThinServer.exe escalada de privilegiosAutomation SoftwareNot DefinedNot Defined0.040.00099CVE-2023-2917
2023-08-176.46.4Rockwell Automation ThinManager ThinServer desbordamiento de búferAutomation SoftwareNot DefinedNot Defined0.000.00052CVE-2023-2914
2023-08-177.07.0Rockwell Automation ThinManager ThinServer directory traversalAutomation SoftwareNot DefinedNot Defined0.000.00093CVE-2023-2915
2023-08-086.86.7Rockwell Automation Armor PowerFlex Event Log denegación de servicioAutomation SoftwareNot DefinedOfficial Fix0.000.00044CVE-2023-2423

168 no se muestran más entradas

Do you want to use VulDB in your project?

Use the official API to access entries easily!