Skip to content
OpenAdvisories
High ICSA-26-244-01 4 CVEs

Rockwell Automation RSLinx Classic

Published Sep 1, 2026 · Updated Sep 1, 2026

Vendor: Rockwell Automation Product: RSLinx Classic®

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the affected product.

Vulnerabilities 4

  • Critical 9.2
    CVE-2026-9621

    RSLinx Classic® - Multiple Vulnerabilities

    A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover

    Rockwell Automation RSLinx Classic® ICS / OT
  • High 8.7
    CVE-2026-9622

    RSLinx Classic® - Multiple Vulnerabilities

    A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.

    Rockwell Automation RSLinx Classic® ICS / OT
  • High 8.7
    CVE-2026-9624

    RSLinx Classic® - Multiple Vulnerabilities

    A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a  restart of the service to recover.

    Rockwell Automation RSLinx Classic® ICS / OT
  • High 8.7
    CVE-2026-9625

    RSLinx Classic® - Multiple Vulnerabilities

    A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.

    Rockwell Automation RSLinx Classic® ICS / OT

Revision history

  1. #1

    Initial Republication of Rockwell Automation Advisory

References