39 matches found
Rockwell Automation CompactLogix Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2026-9307)
A sensitive information disclosure security issue exists within the affected CompactLogix 5370 controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an...
Rockwell Automation CompactLogix Improper Validation of Integrity Check Value (CVE-2025-11694)
A security issue exists within the affected CompactLogix 5370 controllers due to missing validation of sequence numbers and source IP addresses in the CIP protocol. An attacker can abuse the exposed Connection IDs visible on the controller's web interface to send forged CIP packets, resulting in ...
CVE-2025-12011
CVE-2025-12011 describes a denial-of-service vulnerability in Rockwell Automation 5370/5570 controllers (CompactLogix/ControlLogix family). The issue allows a remote attacker to load an invalid project, triggering a major non-recoverable fault (MNRF) on the device. Based on the available document...
Rockwell Automation CompactLogix 5370 Denial of Service Vulnerability
Rockwell Automation CompactLogix 5370 is a programmable logic controller from Rockwell Automation. The Rockwell Automation CompactLogix 5370 suffers from a denial of service vulnerability that originates from sending a malformed CIP forward open message, which can be exploited by an attacker to...
CVE-2025-11743 Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability
A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...
CVE-2025-11743 Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability
A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover...
CVE-2025-11743
CVE-2025-11743 describes a denial-of-service vulnerability in Rockwell Automation CompactLogix 5370 where a malformed CIP forward open message can cause a major nonrecoverable fault requiring a restart. Public documents identify the affected product family and the DoS impact, with a CVSS-like sco...
Rockwell Automation CompactLogix 5370 安全漏洞
Rockwell Automation CompactLogix 5370 is a programmable logic controller from Rockwell Automation. The Rockwell Automation CompactLogix 5370 suffers from a denial of service vulnerability that originates from sending a malformed CIP forward open message, which can be exploited by an attacker to...
Rockwell Automation CompactLogix 5370 输入验证错误漏洞
The Rockwell Automation CompactLogix 5370 is a programmable logic controller from Rockwell Automation. An input validation error vulnerability exists in Rockwell Automation CompactLogix, Compact GuardLogix, ControlLogix, and GuardLogix controllers. An attacker could exploit the vulnerability to...
Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Limitation of a Pathname to a Restricted Directory (CVE-2020-6998)
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to ...
CVE-2020-6998
CVE-2020-6998 affects Rockwell Automation CompactLogix 5370 and ControlLogix 5570 controllers (versions 33 and earlier). The vulnerability stems from the connection establishment algorithm failing to manage control flow, creating an infinite loop when handling CIP packet requests, which may cause...
CVE-2020-6998 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to ...
CVE-2020-6998 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to ...
Rockwell Automation Logix Controllers
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Inclusion of Functionality from Untrusted Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...
Rockwell Automation CompactLogix 5370 Stack-Based Buffer Overflow (CVE-2019-10954)
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state MNRF in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20...
Rockwell Automation/Allen-Bradley 1769-L18ERM LOGIX5318ERM CompactLogix 5370 L1 Processor
Binary data 764811.prm...
Rockwell Automation CompactLogix 5370 Buffer Overflow Denial of Service (CVE-2019-10954)
A denial of service vulnerability exists in Rockwell Automation CompactLogix 5370 PLCs. A remote, unauthenticated attacker could send crafted SMTP configuration packets to cause denial of service conditions...
Rockwell Automation MicroLogix 1100/1400 and CompactLogix 5370 Controllers Open Redirection Vulnerability
The Rockwell Automation MicroLogix 1100/1400 or CompactLogix 5370 controller web server is affected by an open redirect vulnerability. An unauthenticated remote attacker can exploit this issue in conjunction with a social engineering attack to redirect the user to a malicious site that could run ...