CVE-2025-14027

Summary

Multiple denial-of-service vulnerabilities exist in the affected product. These issues can be triggered through various crafted inputs, including malformed Class 3 messages, memory leak conditions, and other resource exhaustion scenarios. Exploitation may cause the device to become unresponsive and, in some cases, result in a major nonrecoverable fault. Recovery may require a restart.

Affected Software

Weaknesses

• CWE-401: CWE-401 Missing Release of Memory after Effective Lifetime

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1769.html

• ←Previous
• Next→