Discover your next big idea for life sciences at PACK EXPO Las Vegas
Experience a breakthrough in life sciences packaging—explore solutions from 2,300 suppliers spanning all industries, all in one place this September

Rockwell Reveals 10 Vulnerabilities in 3 Popular Products

Users are urged to implement best practices to mitigate the potential risks with FactoryTalk, PowerFlex and Arena Simulation.

Company issues three security advisories highlighting 10 vulnerabilities in its FactoryTalk, PowerFlex, and Arena Simulation products
Company issues three security advisories highlighting 10 vulnerabilities in its FactoryTalk, PowerFlex, and Arena Simulation products

Rockwell Automation recently issued three security advisories highlighting 10 vulnerabilities in its FactoryTalk, PowerFlex, and Arena Simulation products. The US Cybersecurity and Infrastructure Security Agency (CISA) has also echoed these advisories to inform organizations about the identified vulnerabilities within the industrial automation company's offerings.

Among the disclosed vulnerabilities, one advisory focused on six flaws within the Arena Simulation software. These included five high-severity arbitrary code execution vulnerabilities and one medium-severity information disclosure and denial-of-service (DoS) issue. Each vulnerability necessitates the user to open a malicious file to exploit it. Rockwell Automation credited the discovery of these vulnerabilities to ICS cybersecurity researcher Michael Heinzl, who is recognized for reporting critical vulnerabilities that often involve manipulating specifically crafted files. Heinzl's advisories elaborated on the exploitation methods involving customized DOE files reported to the vendor through CISA in November 2023.

List: Digitalization Companies From PACK EXPO
Looking for CPG-focused digital transformation solutions? Download our editor-curated list from PACK EXPO featuring top companies offering warehouse management, ERP, digital twin, and MES software with supply chain visibility and analytics capabilities—all tailored specifically for CPG operations.
Download Now
List: Digitalization Companies From PACK EXPO
FDA warning letters surge - is your team prepared?
New guide reveals expert strategies to prevent regulatory issues and respond effectively to FDA enforcement actions in pharmaceutical and medical device manufacturing.
Read More
FDA warning letters surge - is your team prepared?