CVE-2025-9464CWE-400

Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

High · published January 20, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

⚡ A fuzzing test could put your ArmorStart® LT into a deep sleep! This high-severity denial-of-service vulnerability makes the CIP port unresponsive, throwing a wrench in your operations. 🔥 Think of it like a busy restaurant kitchen where an unexpected rush of customers causes the staff to freeze up, unable to take new orders. In this case, the fuzzing inputs are like the unexpected surge, leading to a complete standstill on the CIP port. If exploited, this vulnerability can leave your ArmorStart® LT completely unresponsive, halting critical operations and potentially putting your entire system in jeopardy. This could lead to downtime, lost productivity, and frustration for your team and stakeholders. An outage waiting to happen!

Put simply

Think of it like a busy restaurant kitchen where an unexpected rush of customers causes the staff to freeze up, unable to take new orders. In this case, the fuzzing inputs are like the unexpected surge, leading to a complete standstill on the CIP port. The vulnerability arises from the way ArmorStart® LT processes multiple CIP class inputs during fuzzing. When overwhelmed with unexpected data, the CIP port can become unresponsive, resulting in a denial-of-service condition.

What to do

If exploited, this vulnerability can leave your ArmorStart® LT completely unresponsive, halting critical operations and potentially putting your entire system in jeopardy. This could lead to downtime, lost productivity, and frustration for your team and stakeholders. An outage waiting to happen! To mitigate this issue, review your system's configuration and avoid sending unverified or excessive inputs to the CIP port. Check for any firmware updates released by the vendor and apply them promptly to enhance your system's resilience. Regularly monitor system performance to catch potential issues early! You’ve got this! With the right steps, you can keep your systems running smoothly! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-01-20T13:49Z
EPSS history
Timeline
  • 20 JAN 13:49Z
    Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
    cvelistv5