Denial-of-Service Vulnerability in Rockwell Automation Products
CVE-2025-9124
8.7HIGH
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-9124?
A denial-of-service vulnerability exists within various Rockwell Automation products due to improper handling of crafted CIP unconnected explicit messages. When such messages are processed, they may trigger significant non-recoverable faults in the system, leading to substantial service interruptions. Organizations using these products should implement the recommended security measures to mitigate the potential impact.
Affected Version(s)
Compact GuardLogix® 5370 Version 30.012 and prior