CVE-2025-9466CWE-400

ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

High · published January 20, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

⚡ A single grammar test can cause a reboot! The ArmorStart® LT device unexpectedly restarts, taking crucial monitoring offline for several seconds. 🔥 Think of it like a restaurant where the chef keeps dropping plates. Each time a dish is being served, the kitchen goes quiet while they scramble to clean up the mess — and during that time, customers are left waiting and unhappy. This denial-of-service vulnerability means that during execution of specific tests, critical device monitoring can go down, resulting in potential disruptions in operations. If your network relies on ArmorStart® LT, a sudden reboot could lead to unwanted downtime and a loss of productivity.

Put simply

Think of it like a restaurant where the chef keeps dropping plates. Each time a dish is being served, the kitchen goes quiet while they scramble to clean up the mess — and during that time, customers are left waiting and unhappy. The vulnerability arises during the execution of Achilles EtherNet/IP and CIP grammar tests, causing the device to reboot unexpectedly, which interrupts the Link State Monitor's functionality.

What to do

This denial-of-service vulnerability means that during execution of specific tests, critical device monitoring can go down, resulting in potential disruptions in operations. If your network relies on ArmorStart® LT, a sudden reboot could lead to unwanted downtime and a loss of productivity. To mitigate this issue, ensure that the ArmorStart® LT devices are patched with the latest firmware updates from the manufacturer. Additionally, consider implementing regular testing schedules to minimize disruptions. You've got this! Follow these steps and maintain your network's reliability. 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00632 · 49.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-01-20T13:54Z
EPSS history
Timeline
  • 20 JAN 13:54Z
    ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
    cvelistv5