Rockwellautomation Rslogix 5000 vulnerabilities

3 CVEs affecting Rockwellautomation Rslogix 5000, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22681, published 2021-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22681: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability, published 2021-03-03. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-03-05. EPSS: 63.6% chance of exploitation in the next 30 days. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation…
CVE-2012-0221, published 2012-04-02. Medium severity, CVSS 5.0. EPSS: 10.2% chance of exploitation in the next 30 days. The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an…
CVE-2012-0222, published 2012-04-02. Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days. The FactoryTalk (FT) RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service…