CVE-2026-11317 — Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP

CVE-2026-11317

Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP PUBLISHED

Description (CNA)

A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are more likely to be affected. This can result in a major nonrecoverable fault (MNRF). A program download is required to recover.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / CompactLogix, ControlLogix	affected Versions prior to 34.016; affected Versions prior to 35.015; affected Versions prior to 36.012

CWE

CWE-404

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1772.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.