147 matches found
CVE-2026-9637
A denial-of-service vulnerability exists in Rockwell Automation CompactLogix 5380 and ControlLogix 5580 platforms, caused by improper validation of input length during CIP message processing . An unauthenticated network attacker with low complexity can trigger a major nonrecoverable fault (MNRF) ...
CVE-2026-9637 CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...
CVE-2026-9637 CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...
Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...
The vulnerability of the Certificate Revocation List (CRL) function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 allows a intruder to circumvent security restrictions.
The vulnerability of the Certificate Revocation List CRL function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 is related to improper verification of certificate revocation. Exploiting this vulnerability...
EUVD-2026-43709
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been...
CVE-2026-9636
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been...
CVE-2025-11698
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2025-12012
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2026-9636
CVE-2026-9636 affects Rockwell CompactLogix 5380, ControlLogix 5580, and EN4 communications modules. The issue is in CIP Security certificate revocation handling: the controller may fail to reject certificates signed by intermediates that have been revoked via a CRL, potentially allowing a networ...
CVE-2026-9636 Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been...
CVE-2026-9636 Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been...
EUVD-2025-210462
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2026-9636: Improper Check for Certificate Revocation
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been...
PT-2026-58085
Name of the Vulnerable Software and Affected Versions CompactLogix 5380 affected versions not specified ControlLogix 5580 affected versions not specified EN4 communication modules affected versions not specified GuardLogix 5580 affected versions not specified Compact GuardLogix 5380 affected...
CVE-2025-12012: Buffer Copy without Checking Size of Input
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2025-11698: Buffer Copy without Checking Size of Input
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
PT-2026-58052
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
PT-2026-58034
Name of the Vulnerable Software and Affected Versions Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers affected versions not specified 5380 controllers affected versions not specified 5480 controllers affected versions not specified 5580 controllers...
