What’s Vulnerable › Vulnerabilities

CVE-2025-12011: CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

• Severity: critical (CVSS 9.2 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-14 · updated 2026-09-29
• Weakness: CWE-120

Description

A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).

Affected products

• Rockwell Automation CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570: through 35.015

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1781.html

Get alerted when CVE-2025-12011 or the next vulnerability affects your stack