Skip to content
OpenAdvisories
High · 8.7 CVE-2026-11317 EUVD-2026-37112GHSA-mc6f-7cr6-6cwg

Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP

Published Jun 16, 2026 · Updated Jun 16, 2026 · Assigned by Rockwell

Description

A denial of service security issue exists in the
affected product. The security issue stems from a fault occurring when a
crafted CIP message is sent. Devices with less memory are more likely to be
affected. This can result in a major nonrecoverable fault (MNRF). A program
download is required to recover.

Affected products

VendorProductAffectedFixed
Rockwell Automation CompactLogix, ControlLogix Versions prior to 34.016, Versions prior to 35.015, Versions prior to 36.012 —

Advisories 2

References