CVE-2026-9637 — CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities

CVE-2026-9637

CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities PUBLISHED

Description (CNA)

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / CompactLogix® 5380 / ControlLogix® 5580	affected V33 and prior, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012

CWE

CWE-119

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1792.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.