Rockwell Automation ControlLogix 5580
Advisory ansehen veröffentlicht 2025-09-09
Successful exploitation of this vulnerability could result in a major nonrecoverable fault on the controller.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-9166US | high7.5 | — | ||
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue cou… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-252-07 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-252-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- MitigationControlLogix 5580
Rockwell Automation recommends users to update to version 35.014 or later if possible. If users of the affected software are unable to upgrade the version, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&mode=3&refSoft=1&versions=65620
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan