Denial-of-Service Vulnerability in ArmorStart Classic Motor Controller by Rockwell Automation
CVE-2025-9437

8.7HIGH

Key Information:

Vendor
CVE Published:
14 October 2025

What is CVE-2025-9437?

A vulnerability exists within the ArmorStart Classic distributed motor controller that can lead to denial-of-service conditions. This issue arises from the input of invalid values into the Component Object Model (COM) methods used by the Studio 5000 Logix Designer add-on profile. Exploiting this vulnerability could disrupt operations and impact the functionality of connected systems.

Affected Version(s)

ArmorStart AOP V2.05.07

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-9437 : Denial-of-Service Vulnerability in ArmorStart Classic Motor Controller by Rockwell Automation