MSRXMSRXSecurity
Vendors / Rockwell

Rockwell vulnerabilities being exploited

1 Rockwell flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Multiple Products. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-03-05CVE-2021-22681 Multiple Products
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.

2026-03-26

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.