CVE-2025-9166CWE-476

CVE-2025-9166

High · published September 9, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00435 · 36.4th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-09-09T17:15Z
Affected products (1)
ProductVersionsFixed in
rockwellautomation/controllogix_5580_firmwareall versions—
References (1)
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1747.html · [email protected]
EPSS history
Timeline
  • 09 SEP 12:36Z
    Rockwell Automation ControlLogix® 5580 V35.013 Denial-Of-Service
    cvelistv5