Denial-of-Service Vulnerability in ArmorStart® LT by Rockwell Automation
CVE-2025-9280

8.7HIGH

Key Information:

Vendor

Rockwell Automation
Status
Armorstart® Lt
Vendor
CVE Published:
20 January 2026

What is CVE-2025-9280?

A security issue has been identified in ArmorStart® LT that can lead to a denial-of-service condition. The vulnerability is triggered by fuzzing techniques utilizing Defensics, resulting in the device becoming unresponsive. Users experiencing this issue will find it necessary to reboot the device to restore functionality, potentially impacting operational efficiency and availability.

Affected Version(s)

ArmorStart® LT V2.002 and below

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.