CVE-2025-9124

A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault.

Score

CVSS 4.0 8.7 High

Status

Deferred - PSIRT@rockwellautomation.com

Published

2025-10-14

Last modified

2026-10-08

Weaknesses

CWE-248

Affected products

• Compact Guardlogix 5370 (Rockwell Automation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1755.html