CVE-2025-9160CWE-306

Rockwell Automation CompactLogix® 5480 Code Execution Vulnerability

High · published September 9, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00195 · 8.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-09-09T12:30Z
EPSS history
Timeline
  • 09 SEP 12:30Z
    Rockwell Automation CompactLogix® 5480 Code Execution Vulnerability
    cvelistv5