CVE-2026-9637

Summary

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

Affected Software

VendorProductVersion RangeStatus
Rockwell AutomationCompactLogix® 5380 / ControlLogix® 5580V33 and prior, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012affected

Weaknesses

  • CWE-119: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References