Vulnerability-Lookup

WID-SEC-W-2026-1967

Vulnerability from csaf_certbund - Published: 2026-06-16 22:00 - Updated: 2026-06-16 22:00

Summary

Rockwell Automation CompactLogix 5370 und ControlLogix 5570 Controllers: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Rockwell Automation CompactLogix ist eine Familie von speicherprogrammierbaren Steuerungen (SPS) für Automatisierungsanwendungen. ControlLogix bezeichnet eine Produktfamilie von Steuerungssystemen für Industrieanlagen.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation CompactLogix 5370 und ControlLogix 5570 Controllers ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - Appliance - Sonstiges

CVE-2026-11317

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Rockwell Automation ControlLogix 5570 Controllers <37.011 Rockwell Automation / ControlLogix		5570 Controllers <37.011
Rockwell Automation ControlLogix 5570 Controllers <35.015 Rockwell Automation / ControlLogix		5570 Controllers <35.015
Rockwell Automation CompactLogix 5370 Controllers <37.011 Rockwell Automation / CompactLogix		5370 Controllers <37.011
Rockwell Automation ControlLogix 5570 Controllers <36.012 Rockwell Automation / ControlLogix		5570 Controllers <36.012
Rockwell Automation ControlLogix 5570 Controllers <34.016 Rockwell Automation / ControlLogix		5570 Controllers <34.016
Rockwell Automation CompactLogix 5370 Controllers <36.012 Rockwell Automation / CompactLogix		5370 Controllers <36.012
Rockwell Automation CompactLogix 5370 Controllers <35.015 Rockwell Automation / CompactLogix		5370 Controllers <35.015
Rockwell Automation CompactLogix 5370 Controllers <34.016 Rockwell Automation / CompactLogix		5370 Controllers <34.016

CVE-2026-9307

Affected products

Known affected 5 products

Product	Identifier	Version	Remediation
Rockwell Automation CompactLogix 5370 Controllers <38.011 Rockwell Automation / CompactLogix		5370 Controllers <38.011
Rockwell Automation CompactLogix 5370 Controllers <37.011 Rockwell Automation / CompactLogix		5370 Controllers <37.011
Rockwell Automation CompactLogix 5370 Controllers <36.012 Rockwell Automation / CompactLogix		5370 Controllers <36.012
Rockwell Automation CompactLogix 5370 Controllers <35.015 Rockwell Automation / CompactLogix		5370 Controllers <35.015
Rockwell Automation CompactLogix 5370 Controllers <34.016 Rockwell Automation / CompactLogix		5370 Controllers <34.016

CVE-2025-11694

Affected products

Known affected 5 products

Product	Identifier	Version	Remediation
Rockwell Automation CompactLogix 5370 Controllers <38.011 Rockwell Automation / CompactLogix		5370 Controllers <38.011
Rockwell Automation CompactLogix 5370 Controllers <37.011 Rockwell Automation / CompactLogix		5370 Controllers <37.011
Rockwell Automation CompactLogix 5370 Controllers <36.012 Rockwell Automation / CompactLogix		5370 Controllers <36.012
Rockwell Automation CompactLogix 5370 Controllers <35.015 Rockwell Automation / CompactLogix		5370 Controllers <35.015
Rockwell Automation CompactLogix 5370 Controllers <34.016 Rockwell Automation / CompactLogix		5370 Controllers <34.016

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.rockwellautomation.com/en-us/trust-ce…	external
https://www.rockwellautomation.com/en-us/trust-ce…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Rockwell Automation CompactLogix ist eine Familie von speicherprogrammierbaren Steuerungen (SPS) f\u00fcr Automatisierungsanwendungen.\r\nControlLogix bezeichnet eine Produktfamilie von Steuerungssystemen f\u00fcr Industrieanlagen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation CompactLogix 5370 und ControlLogix 5570 Controllers ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren und vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Appliance\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1967 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1967.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1967 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1967"
      },
      {
        "category": "external",
        "summary": "Rockwell Automation Security Advisory SD1776 vom 2026-06-16",
        "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1776.html"
      },
      {
        "category": "external",
        "summary": "Rockwell Automation Security Advisory SD1772 vom 2026-06-16",
        "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1772.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Rockwell Automation CompactLogix 5370 und ControlLogix 5570 Controllers: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-16T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-17T09:44:53.955+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1967",
      "initial_release_date": "2026-06-16T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-06-16T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "5370 Controllers \u003c38.011",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers \u003c38.011",
                  "product_id": "T055531"
                }
              },
              {
                "category": "product_version",
                "name": "5370 Controllers 38.011",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers 38.011",
                  "product_id": "T055531-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:compactlogix:5370_controllers__38.011"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "5370 Controllers \u003c34.016",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers \u003c34.016",
                  "product_id": "T055532"
                }
              },
              {
                "category": "product_version",
                "name": "5370 Controllers 34.016",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers 34.016",
                  "product_id": "T055532-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:compactlogix:5370_controllers__34.016"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "5370 Controllers \u003c35.015",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers \u003c35.015",
                  "product_id": "T055533"
                }
              },
              {
                "category": "product_version",
                "name": "5370 Controllers 35.015",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers 35.015",
                  "product_id": "T055533-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:compactlogix:5370_controllers__35.015"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "5370 Controllers \u003c36.012",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers \u003c36.012",
                  "product_id": "T055534"
                }
              },
              {
                "category": "product_version",
                "name": "5370 Controllers 36.012",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers 36.012",
                  "product_id": "T055534-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:compactlogix:5370_controllers__36.012"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "5370 Controllers \u003c37.011",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers \u003c37.011",
                  "product_id": "T055540"
                }
              },
              {
                "category": "product_version",
                "name": "5370 Controllers 37.011",
                "product": {
                  "name": "Rockwell Automation CompactLogix 5370 Controllers 37.011",
                  "product_id": "T055540-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:compactlogix:5370_controllers__37.011"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "CompactLogix"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "5570 Controllers \u003c37.011",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers \u003c37.011",
                  "product_id": "T055530"
                }
              },
              {
                "category": "product_version",
                "name": "5570 Controllers 37.011",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers 37.011",
                  "product_id": "T055530-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:controllogix:5570_controllers__37.011"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "5570 Controllers \u003c34.016",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers \u003c34.016",
                  "product_id": "T055535"
                }
              },
              {
                "category": "product_version",
                "name": "5570 Controllers 34.016",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers 34.016",
                  "product_id": "T055535-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:controllogix:5570_controllers__34.016"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "5570 Controllers \u003c36.012",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers \u003c36.012",
                  "product_id": "T055538"
                }
              },
              {
                "category": "product_version",
                "name": "5570 Controllers 36.012",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers 36.012",
                  "product_id": "T055538-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:controllogix:5570_controllers__36.012"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "5570 Controllers \u003c35.015",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers \u003c35.015",
                  "product_id": "T055541"
                }
              },
              {
                "category": "product_version",
                "name": "5570 Controllers 35.015",
                "product": {
                  "name": "Rockwell Automation ControlLogix 5570 Controllers 35.015",
                  "product_id": "T055541-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:rockwellautomation:controllogix:5570_controllers__35.015"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ControlLogix"
          }
        ],
        "category": "vendor",
        "name": "Rockwell Automation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-11317",
      "product_status": {
        "known_affected": [
          "T055530",
          "T055541",
          "T055540",
          "T055538",
          "T055535",
          "T055534",
          "T055533",
          "T055532"
        ]
      },
      "release_date": "2026-06-16T22:00:00.000+00:00",
      "title": "CVE-2026-11317"
    },
    {
      "cve": "CVE-2026-9307",
      "product_status": {
        "known_affected": [
          "T055531",
          "T055540",
          "T055534",
          "T055533",
          "T055532"
        ]
      },
      "release_date": "2026-06-16T22:00:00.000+00:00",
      "title": "CVE-2026-9307"
    },
    {
      "cve": "CVE-2025-11694",
      "product_status": {
        "known_affected": [
          "T055531",
          "T055540",
          "T055534",
          "T055533",
          "T055532"
        ]
      },
      "release_date": "2026-06-16T22:00:00.000+00:00",
      "title": "CVE-2025-11694"
    }
  ]
}

CVE-2025-11694 (GCVE-0-2025-11694)

Vulnerability from cvelistv5 – Published: 2026-06-16 13:39 – Updated: 2026-06-16 17:48

Title

Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

Summary

A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-354 - Improper validation of integrity check value

Assigner

Rockwell

References

1 reference

URL	Tags
https://www.rockwellautomation.com/en-us/trust-ce…

Impacted products

1 product

Vendor	Product	Version
Rockwell Automation	CompactLogix 5370	Affected: V36 (custom)

Credits

This security issue was found by external researcher Tyler Lentz of Idaho National Laboratory.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-11694",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T15:21:18.608064Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T15:21:42.199Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CompactLogix 5370",
          "vendor": "Rockwell Automation",
          "versions": [
            {
              "status": "affected",
              "version": "V36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "This security issue was found by external researcher Tyler Lentz of Idaho National Laboratory."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A security issue exists within\u0026nbsp;1769 CompactLogix controllers\u0026nbsp;due to the\u0026nbsp;missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID\u2019s visible on the web interface to perform denial-of-service attacks, resulting in a\u0026nbsp;minor fault."
            }
          ],
          "value": "A security issue exists within\u00a01769 CompactLogix controllers\u00a0due to the\u00a0missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID\u2019s visible on the web interface to perform denial-of-service attacks, resulting in a\u00a0minor fault."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "CWE-354 Improper validation of integrity check value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-16T17:48:53.691Z",
        "orgId": "b73dd486-f505-4403-b634-40b078b177f0",
        "shortName": "Rockwell"
      },
      "references": [
        {
          "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1776.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ca href=\"https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112\u0026amp;mode=3\u0026amp;refSoft=1\u0026amp;versions=55023,55024,55025,55026,55027,55061\" target=\"_blank\" rel=\"noreferrer noopener\"\u003eV38.011\u003c/a\u003e\u0026nbsp;"
            }
          ],
          "value": "V38.011 https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx"
        }
      ],
      "source": {
        "advisory": "SD1776",
        "discovery": "EXTERNAL"
      },
      "title": "Rockwell Automation CompactLogix 5370 Controllers \u2013 Multiple Vulnerabilities",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0",
    "assignerShortName": "Rockwell",
    "cveId": "CVE-2025-11694",
    "datePublished": "2026-06-16T13:39:46.158Z",
    "dateReserved": "2025-10-13T15:55:35.637Z",
    "dateUpdated": "2026-06-16T17:48:53.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-11317 (GCVE-0-2026-11317)

Vulnerability from cvelistv5 – Published: 2026-06-16 13:10 – Updated: 2026-06-16 15:20

Title

Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP

Summary

A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are more likely to be affected. This can result in a major nonrecoverable fault (MNRF). A program download is required to recover.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-404 - Improper Resource Shutdown or Release

Assigner

Rockwell

References

1 reference

URL	Tags
https://www.rockwellautomation.com/en-us/trust-ce…

Impacted products

1 product

Vendor	Product	Version
Rockwell Automation	CompactLogix, ControlLogix	Affected: Versions prior to 34.016 Affected: Versions prior to 35.015 Affected: Versions prior to 36.012

Date Public

2026-06-16 13:04

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T15:20:28.009227Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T15:20:36.449Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "CompactLogix, ControlLogix",
          "vendor": "Rockwell Automation",
          "versions": [
            {
              "status": "affected",
              "version": "Versions prior to 34.016"
            },
            {
              "status": "affected",
              "version": "Versions prior to 35.015"
            },
            {
              "status": "affected",
              "version": "Versions prior to 36.012"
            }
          ]
        }
      ],
      "datePublic": "2026-06-16T13:04:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A denial of service security issue exists in the\naffected product. The security issue stems from a fault occurring when a\ncrafted CIP message is sent. Devices with less memory are more likely to be\naffected. This can result in a major nonrecoverable fault (MNRF). A program\ndownload is required to recover."
            }
          ],
          "value": "A denial of service security issue exists in the\naffected product. The security issue stems from a fault occurring when a\ncrafted CIP message is sent. Devices with less memory are more likely to be\naffected. This can result in a major nonrecoverable fault (MNRF). A program\ndownload is required to recover."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "CWE-404: Improper Resource Shutdown or Release",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-16T13:10:19.255Z",
        "orgId": "b73dd486-f505-4403-b634-40b078b177f0",
        "shortName": "Rockwell"
      },
      "references": [
        {
          "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1772.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Upgrade to\u0026nbsp;\u003cbr\u003eVersion 34.016 and later\u003cdiv\u003eVersion 35.015 and later\u003cbr\u003eVersion 36.012 and later\u003cbr\u003e\u003cp\u003eVersion\n37.011 and later\u003c/p\u003e\u003c/div\u003e"
            }
          ],
          "value": "Upgrade to\u00a0\nVersion 34.016 and laterVersion 35.015 and later\nVersion 36.012 and later\n\n\nVersion\n37.011 and later"
        }
      ],
      "source": {
        "advisory": "SD1772",
        "discovery": "INTERNAL"
      },
      "title": "Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0",
    "assignerShortName": "Rockwell",
    "cveId": "CVE-2026-11317",
    "datePublished": "2026-06-16T13:10:19.255Z",
    "dateReserved": "2026-06-04T19:20:43.192Z",
    "dateUpdated": "2026-06-16T15:20:36.449Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-9307 (GCVE-0-2026-9307)

Vulnerability from cvelistv5 – Published: 2026-06-16 13:42 – Updated: 2026-06-16 17:49

Title

Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

Summary

A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attacker to construct malicious packets, leading to Denial-of-Service.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-497 - Exposure of sensitive system information to an unauthorized control sphere

Assigner

Rockwell

References

1 reference

URL	Tags
https://www.rockwellautomation.com/en-us/trust-ce…

Impacted products

1 product

Vendor	Product	Version
Rockwell Automation	CompactLogix 5370	Affected: V36 (custom)

Credits

This security issue was found by external researcher Tyler Lentz of Idaho National Laboratory.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9307",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-16T15:22:44.125561Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T15:22:53.470Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CompactLogix 5370",
          "vendor": "Rockwell Automation",
          "versions": [
            {
              "status": "affected",
              "version": "V36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "This security issue was found by external researcher Tyler Lentz of Idaho National Laboratory."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The\u0026nbsp;controller\u0027s\u0026nbsp;web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be\u0026nbsp;leveraged\u0026nbsp;by an attacker to construct malicious packets, leading to Denial-of-Service."
            }
          ],
          "value": "A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The\u00a0controller\u0027s\u00a0web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be\u00a0leveraged\u00a0by an attacker to construct malicious packets, leading to Denial-of-Service."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-497",
              "description": "CWE-497 Exposure of sensitive system information to an unauthorized control sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-16T17:49:40.834Z",
        "orgId": "b73dd486-f505-4403-b634-40b078b177f0",
        "shortName": "Rockwell"
      },
      "references": [
        {
          "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1776.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ca href=\"https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112\u0026amp;mode=3\u0026amp;refSoft=1\u0026amp;versions=55023,55024,55025,55026,55027,55061\" target=\"_blank\" rel=\"noreferrer noopener\"\u003eV38.011\u003c/a\u003e\u0026nbsp;"
            }
          ],
          "value": "V38.011 https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx"
        }
      ],
      "source": {
        "advisory": "SD1776",
        "discovery": "EXTERNAL"
      },
      "title": "Rockwell Automation CompactLogix 5370 Controllers \u2013 Multiple Vulnerabilities",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0",
    "assignerShortName": "Rockwell",
    "cveId": "CVE-2026-9307",
    "datePublished": "2026-06-16T13:42:08.999Z",
    "dateReserved": "2026-05-22T18:09:17.609Z",
    "dateUpdated": "2026-06-16T17:49:40.834Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-1967

CVE-2025-11694 (GCVE-0-2025-11694)

CVE-2026-11317 (GCVE-0-2026-11317)

CVE-2026-9307 (GCVE-0-2026-9307)

Tags

Sightings

Nomenclature