What’s Vulnerable › Vulnerabilities

CVE-2025-9160: Rockwell Automation CompactLogix® 5480 Code Execution Vulnerability

• Severity: high (CVSS 7.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-06-17
• Weakness: CWE-306

Description

A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution.

Affected products

• Rockwell Automation CompactLogix 5480: from Version 32 through 37.011 w Windows package (2.1.0) Win10 v1607

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1746.html

Get alerted when CVE-2025-9160 or the next vulnerability affects your stack