Vulnerabilidades de Rockwell Auotmation
CVEs publicadas que afetam produtos de Rockwell Auotmation: 2 registro(s), com severidade, exploração e correções.
CVE-2026-8312
Alta · 7.3
CWE-787 14/07/2026
Rockwell Automation Arena® - Memory Corruption Vulnerability
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.
CVE-2026-10577
Crítica · 10.0
CWE-306 14/07/2026
Rockwell Automation 1715 Redundant IO – Access Control Vulnerability
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.