PT-2026-49718 · Rockwell Automation · Compactlogix
CVE-2026-9307
·
Published
2026-06-16
·
Updated
2026-06-16
CVSS v4.0
6.3
Medium
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
CompactLogix (affected versions not specified)
Description
A sensitive information disclosure issue exists in the web server of the controller. The diagnostics webpage exposes CIP (Common Industrial Protocol) Connection IDs to any unauthenticated user on the network. An attacker can use these IDs to construct malicious packets, which may result in a Denial-of-Service (DoS), a condition where the system becomes unavailable to its intended users.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Compactlogix