Buffer overflow in Rockwell Automation Compactlogix® 5370 Compact Guardlogix® Controllogix® 5570
CVE-2025-12011
A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).
Vulnerability class: Buffer Overflow
EPSS: 0.004 (35.6th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation Compactlogix® 5370 Compact Guardlogix® Controllogix® 5570 — versions 35.015 and earlier