CVE-2025-12012

Name of the Vulnerable Software and Affected Versions Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers (affected versions not specified) 5380 controllers (affected versions not specified) 5480 controllers (affected versions not specified) 5580 controllers (affected versions not specified)

Description A denial-of-service issue exists due to a buffer copy operation that lacks input size validation. This allows a remote attacker to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF), which is a critical state where the controller stops executing its program and requires a reset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.