Vulnerability details
CVE-2025-11694
Rockwell Automation CompactLogix 5370
Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
CVSS 4.0
8.7High
Official description
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 4.0 | CVEProject cvelistV5 (CNA) (Rockwell) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Rockwell Automation | CompactLogix 5370 | V36 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-06-16
- Last updated
- 2026-06-16
- State
- Published
- Assigner (CNA)
- Rockwell
Exploit prediction (EPSS)
0.17%
Probability of exploitation in 30 days
6.4%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-354Improper validation of integrity check value