Rockwell Auotmation vulnerabilities
We track 4 vulnerabilities in Rockwell Auotmation products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 14, 2026.
Latest Rockwell Auotmation vulnerabilities
- 7.3 High severity
Arena® Simulation: Out-of-bounds Write
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could
- 10.0 Critical severity
1715 EtherNet/IP Communications Module: Missing Authentication for Critical Functionality
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) co
- 9.8 Critical severity
1756-EN2T Series A, B, C: Out-of-bounds Write
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat acto
- 9.8 Critical severity
1756-EN2T Series A, B, C: Out-of-bounds Write
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messa