CVE-2025-9124: Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability
A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Rockwell Automation Compact GuardLogix 5370to a version that resolves this vulnerability.Fixed in 30.14
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9124?
CVE-2025-9124 is classified as a denial-of-service vulnerability that can cause a major non-recoverable fault.
How do I fix CVE-2025-9124?
To mitigate CVE-2025-9124, it is recommended to apply the latest security patches provided by Rockwell Automation.
What products are affected by CVE-2025-9124?
CVE-2025-9124 specifically affects the Rockwell Automation Compact GuardLogix 5370.
What causes CVE-2025-9124?
CVE-2025-9124 is caused by a fault when a crafted CIP unconnected explicit message is sent to the affected product.
Can CVE-2025-9124 be exploited remotely?
Yes, CVE-2025-9124 can be remotely exploited, resulting in a denial-of-service condition.