Vulnerability in Rockwell Automation Controllogix® Redundancy Enhanced Module
CVE-2025-14027
Multiple denial-of-service vulnerabilities exist in the affected product. These issues can be triggered through various crafted inputs, including malformed Class 3 messages, memory leak conditions, and other resource exhaustion scenarios. Exploitation may cause the device to become unresponsive and, in some cases, result in a major nonrecoverable fault. Recovery may require a restart.
EPSS: 0.004 (27.8th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation Controllogix® Redundancy Enhanced Module — versions All Versions