Buffer overflow in Rockwell Automation Compactlogix® 5370 Compact Guardlogix® Controllogix® 5570

CVE-2025-12012

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).

Vulnerability class: Buffer Overflow

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.