CVE-2025-9166

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.

Score

CVSS 4.0 8.2 High

Status

Analyzed - PSIRT@rockwellautomation.com

Published

2025-09-09

Last modified

2025-09-09

Weaknesses

CWE-476

Affected products

• Controllogix 5580 (Rockwell Automation)
• Controllogix 5580 Firmware (Rockwellautomation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1747.html