Description
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault (Code 16#0010), and the module cannot recover without a power cycle.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FLEX 5000 I/O | Version 2.011 or below | — |
Advisories 1
- ICSA-25-226-26 Rockwell Automation FLEX 5000 I/O (Update A) CISA ICS & IT advisories · Sep 30, 2025