ICSA-26-244-03

icsaUScisa_csaf_ot

Rockwell Automation Logix Platform

view advisory published 2026-09-01

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-9637US——
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP me…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationCompact GuardLogix 5380

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationCompactLogix 5380

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationControlLogix 5580

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationGuardLogix 5580

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • FixedCompact GuardLogix 5380

    Rockwell Automation recommends users update to firmware version 34.015.

  • FixedCompactLogix 5380

    Rockwell Automation recommends users update to firmware version 34.015.

  • FixedControlLogix 5580

    Rockwell Automation recommends users update to firmware version 34.015.

  • FixedGuardLogix 5580

    Rockwell Automation recommends users update to firmware version 34.015.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan