CVE-2025-9124CWE-248

CVE-2025-9124

published October 14, 2025

CVSS
8.7
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.7th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2025-10-14T17:15Z
References (1)
EPSS history
Timeline
  • 14 OCT 12:24Z
    Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability
    cvelistv5