CVE-2025-11694
Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
- State
- Published
- Severity
- 8.7 High
- Published
- Jun 16, 2026
- Updated
- Jun 16, 2026
- Reserved
- Oct 13, 2025
Description
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | Rockwell |
Weaknesses
- CWE-354 Improper validation of integrity check value
Affected Products
| Product | Versions |
|---|---|
CompactLogix 5370Rockwell Automation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.