CVE-2026-11317CWE-404
Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP
High · published June 16, 2026
What it is
A denial of service security issue exists in the
affected product. The security issue stems from a fault occurring when a
crafted CIP message is sent. Devices with less memory are more likely to be
affected. This can result in a major nonrecoverable fault (MNRF). A program
download is required to recover.
The record
Technical detail
- CVSS v4.0
- 8.7 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00302 · 21.7th percentile
- Weakness
- CWE-404 · Improper Resource Shutdown or Release
- Published
- 2026-06-16T13:10Z
EPSS history
Timeline