CVE-2025-11694
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.7
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.17%
- CWE
- CWE-354
- Published
- 2026-06-16
- Last modified
- 2026-06-16
Affected products
- Rockwell Automation CompactLogix 5370
Weakness type
Related vulnerabilities
- CVE-2026-72929 — Windows Installer Elevation of Privilege Vulnerability
- CVE-2026-20354 — Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty
- CVE-2026-82549 — Linux Foundation Magma SecurityModeComplete integrity check
- CVE-2026-75803 — AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
- CVE-2026-75625 — Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass
- CVE-2026-12817 — OpenPGP AEAD decryption skips final tag on chunk-aligned data
- CVE-2026-12816 — IESEngine stream-mode MAC forgery via length-dependent KDF split
- CVE-2026-12803 — KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)