CVE Feed

    Dashboard / CVE / CVE-2025-11743

    CVE-2025-11743

    A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover.

    Published:Jan 20, 2026
    Last Modified:Apr 15, 2026
    EPS:Jan 20, 2026
    EPSS Score:0.00045
    CVSS Score:7.1

    Affected Products

    Vendor
    Rockwellautomation
    Product
    Compactlogix 5370

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-12012 (CVSS 9.2) — A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a m…
    CVE-2025-12011 (CVSS 9.2) — A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially allow a remot…
    CVE-2026-9307 (CVSS 6.3) — A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The con…
    CVE-2025-11694 (CVSS 8.7) — A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers…
    CVE-2022-3157 (CVSS 8.6) — A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a …
    CVE-2022-1797 (CVSS 6.8) — A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service …
    CVE-2021-22681 (CVSS 9.8) — Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High