CVE-2025-11698CWE-120

CVE-2025-11698

published July 14, 2026

CVSS
9.2
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00428 · 36.0th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-07-14T20:16Z
References (1)
EPSS history
Timeline
  • 14 JUL 15:05Z
    CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow
    cvelistv5