Denial-of-Service Vulnerability in ArmorStart® LT by Rockwell Automation
CVE-2025-9279

8.7HIGH

Key Information:

Vendor

Rockwell Automation
Status
Armorstart® Lt
Vendor
CVE Published:
20 January 2026

What is CVE-2025-9279?

A security vulnerability has been identified in ArmorStart® LT devices that may lead to denial-of-service conditions. When subjected to Achilles EtherNet/IP Step Limit Storm tests, the devices may reboot unexpectedly, resulting in temporary outages of the Link State Monitor for several seconds. This interruption poses risks to continuous operations, particularly in environments where uptime is critical.

Affected Version(s)

ArmorStart® LT V2.002 and below

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.