Rockwellautomation Armorstart Lt Firmware vulnerabilities

9 CVEs affecting Rockwellautomation Armorstart Lt Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9466, published 2026-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9466, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP and CIP grammar tests, the device reboots unexpectedly,…
CVE-2025-9283, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limits Storms tests, the device reboots unexpectedly,…
CVE-2025-9282, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm tests, the device reboots unexpectedly,…
CVE-2025-9281, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device reboots
CVE-2025-9279, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm tests, the device reboots unexpectedly,…
CVE-2025-9465, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, the device reboots unexpectedly, causing…
CVE-2025-9280, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot.
CVE-2025-9278, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. After running a Burp Suite active scan, the device loses ICMP connectivity, causing the web application…
CVE-2025-9464, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to…