Do Son MicroLogix 1400 attacks hit internet-exposed PLCs at water utilities, locking out operators. Rockwell shares recovery and hardening steps.
Rockwell Automation
Rockwell Automation vulnerability CVE-2026-10577 (CVSS 10) exposes an unauthenticated debug port in 1715 Redundant I/O modules. Update to firmware 3.011.
Rockwell Automation vulnerabilities affect FactoryTalk Historian and FLEX I/O adapters, including a critical unauthenticated password-change flaw.
FBI and CISA warn of Iranian APTs hijacking internet-facing PLCs to disrupt U.S. energy and water systems. Learn the 2026 TTPs and how to defend your OT.
Rockwell Automation issues an urgent warning: disconnect industrial controllers from the internet immediately to protect against active threat actors.
Rockwell patched high-severity flaws: SQLi (CVSS 8.8) in FactoryTalk DataMosaix and a DoS (CVSS 7.5) in GuardLink requiring manual power cycle to fix. Update to prevent industrial downtime and data tampering.
Rockwell issued an urgent fix for a Critical (CVSS 10.0) auth bypass in its 1783-NATR router (CVE-2025-7328). The flaw allows remote admin takeover and configuration disruption.
Rockwell patched a flaw (CVE-2025-9067) in FactoryTalk Linx allowing SYSTEM privilege escalation via MSI repair hijacking. Other flaws risk file deletion and DoS in ICS environments.
A critical CSRF flaw in Rockwell Stratix switches (CVE-2025-7350) could allow unauthenticated remote attackers to achieve RCE. The flaw has a CVSS score of 9.6.
A critical RCE vulnerability (CVSS 9.8) in Rockwell's ControlLogix modules poses a severe risk to industrial systems. Update immediately to firmware v12.001.
Rockwell Automation's Arena Simulation software has three high-severity memory abuse flaws that could allow RCE or data leaks when opening a crafted file. Update immediately.
Two flaws (CVE-2025-6376/6377 in Rockwell Arena Simulation allow RCE via crafted DOE files. Update to 16.20.09 immediately; avoid untrusted files.
Critical vulnerability (CVSS 9.8) in Rockwell Automation! Learn about the high-risk flaw and how to protect industrial systems.
Learn about CVE-2025-1449, a critical vulnerability in Verve Asset Manager that allows command execution by unauthorized users.
Rockwell Automation's FactoryTalk AssetCentre software has critical vulnerabilities (CVE-2025-0477) that pose severe risks to industrial control systems. Stay informed and protect your ICS.
CVE-2025-24479 and CVE-2025-24480 could potentially allow attackers to execute malicious code and compromise affected systems.
Protect your Rockwell Automation PowerMonitor 1000 devices from critical vulnerabilities CVE-2024-12371, CVE-2024-12372, and CVE-2024-12373. Learn how to secure your systems.
Stay informed about the critical flaws in Rockwell Automation's FactoryTalk ThinManager and the need for increased security measures.
Discover the serious vulnerabilities found in Rockwell Automation's FactoryTalk software. Learn how CVE-2024-45823 and CVE-2024-45824 could allow unauthorized access and remote code execution.
Protect your systems from critical vulnerabilities in Rockwell Automation's ThinManager ThinServer software. Learn about the risks posed by CVE-2024-7988 and the urgent need for patching.
The most severe of these vulnerabilities, CVE-2024-5988 and CVE-2024-5989, have been assigned a CVSS score of 9.8
According to SecurityAffairs reported on the 19th, Rockwell Automation issued a warning that due to security vulnerabilities in Cisco...