CVE-2025-11694CWE-354

CVE-2025-11694

published June 16, 2026

CVSS
8.7
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2026-06-16T19:16Z
References (1)
EPSS history
Timeline
  • 16 JUN 13:39Z
    Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
    cvelistv5