DeutschShown in its original language — a full translation is planned for a future version.
Rockwell Automation CompactLogix 5370 und ControlLogix 5570 Controllers: Mehrere Schwachstellen
view advisory published 2026-06-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation CompactLogix 5370 und ControlLogix 5570 Controllers ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-9307US | — | — | ||
A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics web… | ||||
| CVE-2026-11317US | — | — | ||
A denial of service security issue exists in the
affected product. The security issue stems from a fault occurring when a
crafted CIP message is sent. Devices with less memory are… | ||||
| CVE-2025-11694US | — | — | ||
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan