Multiple Vulnerabilities in Rockwell Industrial Control Systems

Affected Environment
Rockwell Historian ME, ControlLogix, CompactLogix, GuardLogix, FactoryTalk Activation Manager, Logix Platform, and RSLinx Classic.

Threat Overview
Multiple vulnerabilities across Rockwell ICS products enable privilege escalation, remote code execution, or denial-of-service conditions.

Exposure Timeline
Disclosed via CISA ICS advisories; fixed firmware and software versions are available for most affected products now.

Attack Surface
Web interfaces, CIP message processing, and local DLL search paths across industrial controllers and configuration tools.

Technical Root Cause
Out-of-bounds writes, infinite loops, incorrect default permissions, and integer overflow or underflow in CIP packet handling.

Exploitation Pathway
Authenticated or network-adjacent attackers send crafted CIP packets or exploit DLL search order to escalate or crash devices.