CVE-2025-9437

A security issue exists within the Studio 5000 Logix Designer add-on profile (AOP) for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model (COM) methods.

Score

CVSS 4.0 8.7 High

Status

Deferred - PSIRT@rockwellautomation.com

Published

2025-10-14

Last modified

2026-10-08

Weaknesses

CWE-755

Affected products

• Armorstart Aop (Rockwell Automation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1751.html