Rockwell Automation Flex 5000 I/o vulnerabilities

2 CVEs affecting Rockwell Automation Flex 5000 I/o, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9042, published 2025-08-14.

More from Rockwell Automation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-9042, published 2025-08-14. High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days. A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing…
• CVE-2025-9041, published 2025-08-14. High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days. A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing…