CVE-2025-9283CWE-400

ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

High · published January 20, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

⚡ A pesky Denial-of-Service vulnerability can leave ArmorStart® LT devices rebooting unexpectedly during tests! Think of it like a restaurant where the chef keeps walking out of the kitchen every time the oven timer dings—dinner service comes to a grinding halt while patrons are left waiting! 🍽️ An attacker could exploit this vulnerability to cause frequent reboots, disrupting critical operations and leaving your network vulnerable during the downtime. Imagine the chaos of losing vital connectivity for several seconds at a time while the device is out of commission—absolutely devastating!

Put simply

Think of it like a restaurant where the chef keeps walking out of the kitchen every time the oven timer dings—dinner service comes to a grinding halt while patrons are left waiting! 🍽️ This vulnerability arises during the execution of the Achilles EtherNet/IP Step Limits Storms tests, causing the device to reboot and the Link State Monitor to go down.

What to do

An attacker could exploit this vulnerability to cause frequent reboots, disrupting critical operations and leaving your network vulnerable during the downtime. Imagine the chaos of losing vital connectivity for several seconds at a time while the device is out of commission—absolutely devastating! To mitigate this risk, it's crucial to update your ArmorStart® LT device to the latest firmware version as soon as it's available. Additionally, consider monitoring your network traffic for any anomalies that could indicate attempts to exploit this issue. 🔒 You've got this! Stay proactive, and you'll keep your systems running smoothly! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00611 · 48.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-01-20T13:59Z
EPSS history
Timeline
  • 20 JAN 13:59Z
    ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
    cvelistv5