What’s Vulnerable › Vulnerabilities

CVE-2025-11743: Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability

• Severity: high (CVSS 7.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-20 · updated 2026-06-17
• Weakness: CWE-1284

Description

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover.

Affected products

• Rockwell Automation CompactLogix 5370: Version 34.013 and prior, Version 35.012 and prior, Version 36.011

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1770.html

Get alerted when CVE-2025-11743 or the next vulnerability affects your stack