Vulnerability in Rockwell Automation Compactlogix® 5370
CVE-2025-11743
A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover.
EPSS: 0.002 (5.5th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation Compactlogix® 5370 — versions Version 34.013 and prior, Version 35.012 and prior, Version 36.011