Skip to content
OpenAdvisories
Critical · 9.2 CVE-2025-12012 EUVD-2025-210462GHSA-3cv6-265j-3gwv

CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

Published Jul 14, 2026 · Updated Jul 14, 2026 · Assigned by Rockwell

Description

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).

Affected products

VendorProductAffectedFixed
Rockwell Automation CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570 V34.012 and earlier V35.011 and earlier —

Advisories 2

References