Rockwell Automation
The latest Rockwell Automation coverage — news, analysis, and updates from the WindowsNews.AI desk.
ArmorStart AOP DoS Vulnerability CVE-2025-9437: Critical Security Alert
Rockwell Automation has confirmed a critical denial-of-service vulnerability in the Studio 5000 Logix Designer add-on profile (AOP) for the ArmorStart Classic distributed motor controller that could...
Rockwell 1715 EtherNet/IP DoS Vulnerabilities CVE-2025-9177/9178: Critical ICS Security Alert
Rockwell Automation has issued a critical security advisory confirming two high-severity denial-of-service vulnerabilities in the 1715 EtherNet/IP Communications Module that could allow remote...
Redis Misconfiguration Exposes Sensitive Data in Rockwell Automation's LogixAI: CISA Warns
Rockwell Automation’s FactoryTalk Analytics LogixAI contains a high-severity configuration weakness that could expose sensitive operational data to attackers on adjacent networks. The U.S....
CISA Warns: Remote Attackers Can Brick Rockwell ControlLogix 5580 Controllers — Patch Immediately
A critical flaw in Rockwell Automation’s ControlLogix 5580 programmable logic controllers can be exploited over the network to trigger a ‘major nonrecoverable fault,’ effectively bricking the...
CVE-2025-9161: FactoryTalk Optix RCE via MQTT Plugin Loading — Upgrade to 1.6.0 Immediately
Industrial control system operators running Rockwell Automation’s FactoryTalk Optix visualization platform face a critical threat: a flaw in the product’s embedded MQTT broker allows...
CISA Releases 14 ICS Advisories: Urgent Patches for Rockwell, Schneider, and EG4 Inverter Flaws
{ "title": "CISA Releases 14 ICS Advisories: Urgent Patches for Rockwell, Schneider, and EG4 Inverter Flaws", "content": "The Cybersecurity and Infrastructure Security Agency (CISA) on September...
Rockwell Automation FactoryTalk Activation Manager Vulnerability Allows Remote Decryption and Hijacking
Rockwell Automation has issued an urgent security advisory after a critical cryptographic weakness was discovered in its FactoryTalk Activation Manager, a licensing tool deployed across thousands of...
CISA Warns: Rockwell 1783-NATR Vulnerable to Remote Memory Corruption, Patch Now to v1.007
Rockwell Automation has released an urgent firmware update after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that a memory allocator bug in the 1783-NATR device could...
CISA Flags Rockwell CompactLogix 5480 Flaw That Lets Attackers Run Code Via Physical Access
Three words can make any plant manager’s blood run cold: arbitrary code execution. That’s what CISA is warning about with a newly republished advisory for the Rockwell Automation CompactLogix...
CVE-2025-7350: 9.6-Severity Stratix IOS Injection Flaw Lets Attackers Hijack Industrial Switches
Rockwell Automation has confirmed a remote injection vulnerability in its Stratix IOS that could allow unauthenticated attackers to upload and execute malicious configurations on industrial switches,...
Rockwell FactoryTalk ViewPoint Flaw Lets Attackers Hijack MSI Repairs for SYSTEM Access
A critical privilege escalation vulnerability in Rockwell Automation’s FactoryTalk ViewPoint HMI thin-client software allows a low-privileged local attacker to gain SYSTEM-level control of...
CISA Flags 32 Critical Flaws in Siemens and Rockwell Gear—Some Require Physical Resets
Federal cybersecurity officials on August 14 published thirty-two advisories covering industrial control systems from Siemens, Rockwell Automation, and other vendors, warning that many of the...