CVE-2025-11743CWE-1284

Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability

High · published January 20, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2026-01-20T13:52Z
EPSS history
Timeline
  • 20 JAN 13:52Z
    Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability
    cvelistv5