What’s Vulnerable › Vulnerabilities

CVE-2025-12012: CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

• Severity: critical (CVSS 9.2 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-14 · updated 2026-09-29
• Weakness: CWE-120

Description

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).

Affected products

• Rockwell Automation CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570: through V34.012 and earlier V35.011

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1781.html

Get alerted when CVE-2025-12012 or the next vulnerability affects your stack