← Back to home
ICSA-26-022-03  ·  Published 2026-01-22  ·  View on CISA ICS-CERT ↗

Rockwell Automation CompactLogix 5370

CVSS 6.5 MEDIUM

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

CVEs (1)

Remediations

  • Rockwell Automation reports that the following versions are fixed:
  • Versions 37.011 and later
  • Version 34.016
  • Version 35.015
  • Version 36.012
  • Users using the affected software, who are not able to upgrade to one of the corrected versions, should use our security best practices.
  • For additional details, refer to advisory SD1770 on the Rockwell Automation security page.

Affected Vendors

Rockwell Automation

Affected Products (3)

Rockwell Automation · CompactLogix 5370 <=34.013
Rockwell Automation · CompactLogix 5370 <=35.012
Rockwell Automation · CompactLogix 5370 36.011

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more