Skip to content
OpenAdvisories
High ICSA-26-167-04 2 CVEs

Rockwell Automation CompactLogix

Published Jun 16, 2026 · Updated Jun 16, 2026

Vendor: Rockwell Automation Product: CompactLogix 5370 L1 Product: CompactLogix 5370 L2 Product: CompactLogix 5370 L3

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Vulnerabilities 2

  • High 8.7
    CVE-2025-11694

    Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

    A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denia…

    Rockwell Automation CompactLogix 5370 ICS / OT
  • Medium 6.3
    CVE-2026-9307

    Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

    A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This inf…

    Rockwell Automation CompactLogix 5370 ICS / OT

Revision history

  1. #1

    Initial Republication of Rockwell Automation Security Advisory SD1776

References