High severity · published Jan 20, 2026
CVE-2025-11743
Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability
7.1
CVSS
0.2%
EPSS
No
On KEV
Description
A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C5
CompactLogix® 5370 · Rockwell Automation
Version 34.013 and prior, Version 35.012 and prior, Version 36.011 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11743
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11743
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1770.html
More from CompactLogix® 5370
8.7
CVE-2025-11694
Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
6.3
CVE-2026-9307
Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities