CVE-2025-9124: Rockwell Automation Compact Guardlogix 5370

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault.

Affected products

• Rockwell Automation Compact Guardlogix 5370: up to and including 30.012

Published 2025-10-14. Last modified 2026-10-08.