Skip to content
Sign in
8.7 High

CVE-2025-11694 A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and…

Description

A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.

Affected products and versions

Product Affected versions Fixed in
CompactLogix 5370 36 No fix stated

Other CVEs of CompactLogix 5370

The 3 CVEs of CompactLogix 5370 →
CVE-2026-9307 A sensitive information disclosure security issue exists within the affected CompactLogix controllers 6.3 Medium CVE-2022-3157 A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major… 8.6 High
Track this CVE