CVE-2024-21915

< 2.74

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a maliciou

9.0CRITICAL

CVE-2024-21917

<= 6.31.00

A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service to

9.8CRITICAL

CVE-2023-46290

< 2.80

Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token thr

8.1HIGH

CVE-2021-32960

<= 6.11.00

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vu

8.5HIGH

CVE-2020-14478

<= 6.11.00

A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access loc

7.1HIGH

CVE-2020-14516

all versions

In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of th

10.0CRITICAL

CVE-2021-22681

>= 2.10

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify

9.8CRITICAL

CVE-2020-12033

all versions

In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate s

8.8HIGH

CVE-2020-6967

all versions

In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, Factory

9.8CRITICAL

CVE-2018-18981

<= 2.90

In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous craft

7.5HIGH

CVE-2014-9209

<= 2.70.00

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2

CVE-2012-4714

all versions

Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-

CVE-2012-4713

all versions

Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR