Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-9637

CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities

Description

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation CompactLogix® 5380 / ControlLogix® 5580

Default version status: unaffected

  • V33 and prior, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012affected

References