CVE-2025-9160: Rockwell Automation CompactLogix® 5480 Code Execution Vulnerability
Published Sep 9, 2025
·Updated
A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution.
Affected Software
1 affected component
Rockwell Automation CompactLogix 5480
Remediation
Information
Best security practices should be applied.
Event History
Sep 9, 2025
CVE Published
via MITRE·12:30 PM
Data Sourced
via MITRE·12:30 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Feb 28, 57989
Event
via FIRST·08:15 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-9160?
CVE-2025-9160 has a high severity level due to the potential for arbitrary code execution.
2
How do I fix CVE-2025-9160?
To fix CVE-2025-9160, apply the necessary patches or updates provided by Rockwell Automation for the affected product.
3
Who is affected by CVE-2025-9160?
CVE-2025-9160 affects users of the Rockwell Automation CompactLogix 5480 controller.
4
Can CVE-2025-9160 be exploited remotely?
No, CVE-2025-9160 requires physical access to the device for exploitation.
5
What type of vulnerability is CVE-2025-9160?
CVE-2025-9160 is a code execution vulnerability that allows arbitrary code to be run on the affected system.