Buffer overflow in Rockwell Automation Compactlogix® 5380 / Controllogix® 5580
CVE-2026-9637
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover
Vulnerability class: Buffer Overflow
Affected products
- Rockwell Automation Compactlogix® 5380 / Controllogix® 5580 — versions V33 and prior, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012