Rockwell Automation LP30/40/50 and BM40 Operator Interface

An attacker with valid credentials could stop the operator panel from functioning (denying operators visibility and control), corrupt its memory, or run arbitrary code to manipulate process parameters or steal operational data. This affects all plant operations monitored and controlled through these panels.

Water utilities, municipal electric departments, and any facility using Rockwell Automation LP30/LP40/LP50 or BM40 operator panels for SCADA/process visualization. These panels are common in pumping stations, water treatment, substations, and distributed control environments where they provide the human interface to critical processes.

An attacker with valid operator credentials sends malformed messages to the panel over the control network (AV:N/AC:L). The vulnerable CODESYS runtime processes these requests without proper bounds checking, allowing memory writes or instruction injection. No user interaction is required once the attacker has authenticated.