Vulnerabilities

CVSS

8.7 High

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Risk score

69.6

Published

2026-06-16

Status

Published

A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are more likely to be affected. This can result in a major nonrecoverable fault (MNRF). A program download is required to recover.

Weaknesses

CWE-404

Coverage 1

threat-intel

Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP

Rockwell Automation has identified a denial-of-service vulnerability (CVE-2026-11317) affecting several versions of its Logix 5370 and 5570 controllers. The vulnerability stems from a fault triggered by crafted CIP messa…

CISA Advisories · Jun 16, 2026 High

CVE-2026-11317USdenial-of-serviceciprockwell automation

All articles mentioning it

Advisories and references

• rockwellautomation.com/en-us/trust-center/security-advisories/adviso...