Denial-of-Service Vulnerability in Rockwell Automation Products
CVE-2025-11743

7.1HIGH

Key Information:

Vendor

Rockwell Automation
Status
Compactlogix® 5370
Vendor
CVE Published:
20 January 2026

What is CVE-2025-11743?

A denial-of-service vulnerability exists in the CIP Protocol Implementation from Rockwell Automation. This issue is triggered by the receipt of a malformed CIP forward open message, potentially leading to a severe and nonrecoverable fault that necessitates a system restart to restore functionality. Organizations using affected products are encouraged to review their security posture and implement necessary mitigations to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CompactLogix® 5370 Version 34.013 and prior, Version 35.012 and prior, Version 36.011

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.