Skip to content
OpenAdvisories
High · 8.7 CVE-2026-9637 EUVD-2026-69133GHSA-q93h-wjgg-gqf8

CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities

Published Sep 1, 2026 · Updated Sep 1, 2026 · Assigned by Rockwell

Description

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

Affected products

VendorProductAffectedFixed
Rockwell Automation CompactLogix® 5380 / ControlLogix® 5580 V33 and prior, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012 —

Advisories 2

References