Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

Flashing Red LED on 5094-IF8 Device Due to Inhibited Module

CVE-2025-9041 · published 1 year ago
Summary

The 5094-IF8 device's module may malfunction if it's inhibited, causing a flashing red LED. This can prevent the module from working properly until the device is restarted. To resolve the issue, simply power cycle the device to restore normal operation.

Original advisory text
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashin...
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault (Code 16#0010), and the module cannot recover without a power cycle.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-1287Improper Validation of Specified Type of Input
Timeline
Published14 Aug 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-9041 · NVD
Track software like this
Free during beta