CVE-2026-9637

highpriority · track · 0EPSS 0.004 · 37 %ileDEUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.43% (37th) EPSS
CVSS 7.5 · high
Is it mine?
40 products
Check your exposure
Who says so?
2 sources
cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-27

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedCompact GuardLogix 5380cisa_csaf_ot

    Rockwell Automation recommends users update to firmware version 34.015.

  • FixedCompactLogix 5380cisa_csaf_ot

    Rockwell Automation recommends users update to firmware version 34.015.

  • FixedControlLogix 5580cisa_csaf_ot

    Rockwell Automation recommends users update to firmware version 34.015.

  • FixedGuardLogix 5580cisa_csaf_ot

    Rockwell Automation recommends users update to firmware version 34.015.

  • MitigationCompact GuardLogix 5380cisa_csaf_ot

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationCompactLogix 5380cisa_csaf_ot

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationControlLogix 5580cisa_csaf_ot

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationGuardLogix 5580cisa_csaf_ot

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.7
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–8.7

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · PSIRT@rockwellautomation.com
v4.06.6mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119USCWE-119US
05

affected products (40)

Products and version ranges known to be affected.

showing 20 of 40
06

advisories (2)

Vendor and ecosystem advisories describing this.

  • WID-SEC-W-2026-3142Rockwell Automation ControlLogix 5580, CompactLogix 5380, und CompactLogix 5480: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2026-09-01csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation ControlLogix und Rockwell Automation CompactLogix ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • ICSA-26-244-03Rockwell Automation Logix Platform2026-09-01icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

07

sources

Which sources assert this record, and when.

cert_bundcisa_csaf_otNVDCVE.orgMITRE
published 2026-09-01modified 2026-09-01
08

references (1) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan