Rockwell Automation CompactLogix Buffer Overflow DoS

The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...

Logic Controllers ControlLogix DoS

The vulnerability of the microprogrammed software modules 1756-EN2, 1756-EN3, and 1756-ENBT of Rockwell Automation’s ControlLogix logic controllers is related to improper verification of integrity values. Exploiting this vulnerability can allow an attacker to trigger a service failure using...

Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for...

CVE-2026-9636 Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability

A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been...

CVE-2025-11698

The CVE-2025-11698 vulnerability affects 5380/5480/5580 controllers with boot firmware versions below 1.072. It enables a denial-of-service by allowing a malicious actor to write invalid file data to the controller, potentially causing a major non-recoverable fault (MNRF). The documents do not pr...

CVE-2025-12011 CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault MNRF...

Rockwell Automation ControlLogix Redundancy Module DoS

The vulnerability of Rockwell Automation ControlLogix Redundancy Module’s microprogramming software is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CISA Releases Fourteen Industrial Control Systems Advisories

CISA released fourteen Industrial Control Systems ICS advisories on September 9, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-252-01 Rockwell Automation ThinManager ICSA-25-252-02 ABB Cylon Aspect BMS/BAS...

CVE-2025-7353

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

Rockwell Automation CIP Message Handler DoS

The vulnerability of the CIP Message Handler component in Rockwell Automation’s programmable logic controllers ControlLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, and FactoryTalk Logix Echo is related to errors in processing input...

ControlLogix/GuardLogix 5580 DoS

The vulnerability of the microprogrammed software in programmable logic controllers such as ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 is related to errors in processing input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a...

PT-2024-6589 · Rockwell Automation · Controllogix 5580 +1

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix 5580 versions affected versions not specified Rockwell Automation GuardLogix 5580 versions affected versions not specified Description: A denial-of-service issue exists due to insufficient exception handling i...

Rockwell Automation CompactLogix ControlLogix GuardLogix DoS

The vulnerability of microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, GuardLogix, and communication models 1756-EN4 is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a malicious actor to trigger service failures...

Rockwell Automation ControlLogix Buffer Overflow

The vulnerability of Rockwell Automation’s programmable logic controllers ControlLogix lies in the fact that the output data may escape from memory into the operating system. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during operation...

CVE-2024-21916

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault MNRF. The device will restart itself to recover from the MNRF...

Rockwell Automation ControlLogix buffer error vulnerability

Rockwell Automation ControlLogix and GuardLogix are both Rockwell Automation controllers. A denial of service vulnerability exists in Rockwell Automation ControlLogix and GuardLogix, which can be exploited by an attacker to cause a denial of service condition by sending a specially crafted reques...

Allen-Bradley ControlLogix DoS

The vulnerability of the microprogrammed software in the communication modules of Rockwell Automation’s controllers models 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR,...

ControlLogix PLC Code Generation

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. Exploiting this vulnerability allows an intruder to implant code into the...

CVE-2021-22681

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...

CVE-2021-22681

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...