ICSA-26-211-05

icsaUScisa_csaf_ot

Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module

view advisory published 2026-07-30

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-9636US——
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue ste…
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

  • Fixed1756-EN4TR

    1756-EN4TR: Update to V8.001

  • FixedCompact GuardLogix 5380

    Compact GuardLogix 5380: Update to V38.011

  • FixedCompactLogix 5380

    CompactLogix 5380: Update to V38.011

  • FixedControlLogix 5580

    Rockwell Automation recommend users update to the following versions: ControlLogix 5580: Update to V38.011

  • FixedGuardLogix 5580

    GuardLogix 5580: Update to V38.011

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan