WID-SEC-W-2026-2338

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Rockwell Automation CompactLogix und ControlLogix: Mehrere Schwachstellen

view advisory published 2026-07-14

Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation CompactLogix und Rockwell Automation ControlLogix ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2026-9636US——
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue ste…
CVE-2025-11698US——
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid…
CVE-2025-12012US——
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing th…
CVE-2025-12011US——
A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan