{"id":"CVE-2026-9307","state":"PUBLISHED","title":"Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities","description":"A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attacker to construct malicious packets, leading to Denial-of-Service.","publishedAt":"2026-06-16T13:42:08.999Z","updatedAt":"2026-06-16T17:49:40.834Z","severity":{"score":6.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","source":"Rockwell"},"assigner":"Rockwell","products":["Rockwell Automation CompactLogix 5370"],"affected":[{"vendor":"Rockwell Automation","product":"CompactLogix 5370","defaultStatus":"unaffected","versions":[{"version":"V36","status":"affected","versionType":"custom"}]}],"references":["https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1776.html"],"weaknesses":["CWE-497"],"ingestedAt":"2026-10-29T20:13:52.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/9xxx/CVE-2026-9307.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-9307","state":"PUBLISHED","datePublished":"2026-06-16T13:42:08.999Z","dateUpdated":"2026-06-16T17:49:40.834Z","assignerShortName":"Rockwell","assignerOrgId":"b73dd486-f505-4403-b634-40b078b177f0","dateReserved":"2026-05-22T18:09:17.609Z"},"containers":{"cna":{"title":"Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities","descriptions":[{"lang":"en","value":"A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attacker to construct malicious packets, leading to Denial-of-Service."}],"affected":[{"vendor":"Rockwell Automation","product":"CompactLogix 5370","defaultStatus":"unaffected","versions":[{"version":"V36","status":"affected","versionType":"custom"}]}],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1776.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":6.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-497","lang":"en","description":"CWE-497 Exposure of sensitive system information to an unauthorized control sphere","type":"CWE"}]}],"providerMetadata":{"shortName":"Rockwell","orgId":"b73dd486-f505-4403-b634-40b078b177f0","dateUpdated":"2026-06-16T17:49:40.834Z"},"solutions":[{"lang":"en","value":"V38.011 https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx","supportingMedia":[{"type":"text/html","base64":false,"value":"<a href=\"https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&amp;mode=3&amp;refSoft=1&amp;versions=55023,55024,55025,55026,55027,55061\" target=\"_blank\" rel=\"noreferrer noopener\">V38.011</a>&nbsp;"}]}],"credits":[{"lang":"en","value":"This security issue was found by external researcher Tyler Lentz of Idaho National Laboratory.","type":"finder"}],"source":{"advisory":"SD1776","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-16T15:22:44.125561Z","id":"CVE-2026-9307","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-16T15:22:53.470Z"}}]}}}