Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

1769 CompactLogix Controllers: Denial-of-Service Risk Through Web Interface

CVE-2025-11694 · published 4 months ago
Summary

Some 1769 CompactLogix controllers have a security issue that makes it possible for an attacker to shut down the system by sending fake messages. This can cause minor disruptions to the system. To stay safe, users should ensure their controllers are up to date with the latest security patches.

Original advisory text
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed...
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-354Improper Validation of Integrity Check Value
Timeline
Published16 Jun 2026
Updated26 Oct 2026
First seen16 Jun 2026
Sources
CVE-2025-11694 · NVD
Track software like this
Free during beta