Vulnerabilities

CVSS

8.7 High

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Risk score

69.6

Published

2026-06-16

Status

Published

A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.

Weaknesses

CWE-354

Coverage 1

vulnerability

Rockwell Automation CompactLogix

Rockwell Automation has issued a security advisory regarding vulnerabilities in its CompactLogix 5370 L1, L2, and L3 controllers. These vulnerabilities, stemming from improper validation of sequence numbers and source IP…

CISA Advisories · Jun 16, 2026 Medium

CVE-2025-11694CVE-2026-9307UScipdenial-of-serviceindustrial-control-systems

All articles mentioning it

Advisories and references

• rockwellautomation.com/en-us/trust-center/security-advisories/adviso...