Vulnerability · Published Jun 16, 2026 · Assigned by Rockwell
CVE-2025-11694Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
High 8.7
In plain English
A high-severity security flaw in CompactLogix 5370 from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.2%top 93.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | CompactLogix 5370 | V36 |
Weakness: CWE-354 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N