Status: UPDATED
| Advisory ID: CVE-2025-11698
Key Details
| CVE | CVE-2025-11698 |
| CVSS Score / Version | 9.2 (Critical) / CVSS v4.0 |
| Updated | 2026-09-29 |
| Affected products | Rockwell Automation CompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery Image |
| Classified as | CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')) |
Affected Products, Subsystems & Sectors
| Subsystems | General OT |
| Sectors | Multiple |
What to Know
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF). (NVD)
What to Do
Monitor Rockwell Automation's web page for any future patch releases.
References