Aller au contenu
Se connecter
6.3 Moyenne

CVE-2026-9307 A sensitive information disclosure security issue exists within the affected CompactLogix controllers

Description

A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attacker to construct malicious packets, leading to Denial-of-Service.

Produits et versions touchés

Produit Versions touchées Corrigé en
CompactLogix 5370 36 Pas de correctif indiqué

Autres CVE de CompactLogix 5370

Les 3 CVE de CompactLogix 5370 →
CVE-2025-11694 A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and… 8.7 Élevée CVE-2022-3157 A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major… 8.6 Élevée
Suivre cette CVE