Skip to content
OpenAdvisories
High · 8.7 CVE-2026-9624 EUVD-2026-69140GHSA-gcxp-mxpm-5m5v

RSLinx Classic® - Multiple Vulnerabilities

Published Sep 1, 2026 · Updated Sep 1, 2026 · Assigned by Rockwell

Description

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a  restart of the service to recover.

Affected products

VendorProductAffectedFixed
Rockwell Automation RSLinx Classic® V4.50 and prior —

Advisories 1

References