Vendor
Rockwell Automation
- CVEs tracked · all time
- 14
- in CISA KEV · all time
- 1
- articles · since 11 Sep
- 0
- articles · all time
- 12
No articles in the last 45 daysThe latest: SecurityWeek, Wed 2 Sep, 13:12 UTC.See the full timeline
Products: 1756-EN2, 1756-EN3, 1756-ENBT, Arena® Simulation, CompactLogix 5370 and 6 more
1756-EN2, 1756-EN31756-ENBTArena® SimulationCompactLogix 5370CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570CompactLogix® 5380 / ControlLogix® 5580CompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery ImageFactoryTalk Historian SEFLEX I/O EtherNet/IP AdaptersMultiple Products
CVEs
14 CVEsCVE-2021-22681Rockwell Multiple Products Insufficient Protected Credentials VulnerabilityCVSS9.8CriticalExploited64%EPSS6articles
CVE-2026-9637CompactLogix® 5380 / ControlLogix® 5580 - Multiple VulnerabilitiesCVSS8.7High–Not in KEV0.4%EPSS1article
CVE-2026-8314Rockwell Automation Arena® Simulation vulnerabilityCVSS7.0High–Not in KEV0.3%EPSS1article
CVE-2026-8313Rockwell Automation Arena® Simulation vulnerabilityCVSS7.0High–Not in KEV0.3%EPSS1article
CVE-2026-8085Rockwell Automation Arena® Simulation vulnerabilityCVSS7.0High–Not in KEV0.3%EPSS1article
CVE-2026-8312Rockwell Auotmation Arena® Simulation vulnerabilityCVSS7.0High–Not in KEV0.3%EPSS0articles
CVE-2025-11698Rockwell Automation CompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery Image vulnerabilityCVSS9.2Critical–Not in KEV0.4%EPSS1article
CVE-2025-12012Rockwell Automation CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570 vulnerabilityCVSS9.2Critical–Not in KEV0.4%EPSS1article
CVE-2025-12011CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer OverflowCVSS9.2Critical–Not in KEV0.4%EPSS1article
CVE-2026-96531756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection IDCVSS8.7High–Not in KEV0.2%EPSS1article
CVE-2025-13036Rockwell Automation FactoryTalk Historian Site Edition - Authentication BypassCVSS9.2Critical–Not in KEV0.3%EPSS1article
CVE-2026-0647Rockwell Automation FLEX I/O EtherNet/IP Adapters vulnerabilityCVSS8.8High–Not in KEV0.4%EPSS1article
2 more CVEs
CVE-2025-11694Rockwell Automation CompactLogix 5370 Controllers – Multiple VulnerabilitiesCVSS8.7High–Not in KEV0.2%EPSS1article
CVE-2026-9307Rockwell Automation CompactLogix 5370 Controllers – Multiple VulnerabilitiesCVSS6.3Medium–Not in KEV0.5%EPSS1article
- Rockwell Automation Patches Over a Dozen Vulnerabilities Across ProductsSecurityWeek
- Arena Simulation bugs allow arbitrary code execution, now patchedSecurityWeek
- CISA warns Rockwell PLC flaws may cause denial of serviceCISA · official notice
- Rockwell bug permits DoS attacks using CVE-2026-9653CISA · official notice
- Rockwell Automation patches multiple ICS flawsSecurityOnline
- Rockwell CompactLogix flaws leak data, allow DoS attacksCISA · official notice
- Rockwell PLC CVE-2021-22681 exploited in the wild, risk to plantsSecurityWeek
- KEV adds CVE-2017-7921 and CVE-2021-22681 patch due by 26 MarSOCRadar
- CISA Adds CVEs to KEV for Apple Rockwell and Hikvision FlawsSecurity Affairs
- CISA flags CVE-2017-7921 CVE-2021-22681 amid Hikvision exploitsThe Hacker News
- Rockwell CVE-2021-22681 risks unauthorised Logix accessCISA · official notice
- Rockwell CVE-2021-22681: Active exploit targets Logix systemsCISA · first in our coverage · official notice