Skip to content
Sign in
6.3 Medium

CVE-2026-9307 A sensitive information disclosure security issue exists within the affected CompactLogix controllers

Description

A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attacker to construct malicious packets, leading to Denial-of-Service.

Affected products and versions

Product Affected versions Fixed in
CompactLogix 5370 36 No fix stated

Other CVEs of CompactLogix 5370

The 3 CVEs of CompactLogix 5370 →
CVE-2025-11694 A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and… 8.7 High CVE-2022-3157 A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major… 8.6 High
Track this CVE