Critical severityNVD Advisory· Published Jul 14, 2026· Updated Jul 14, 2026
CVE-2025-11698
CVE-2025-11698
Description
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).
Affected products
1- Range: <1.072
Patches
Vulnerability mechanics
References
1News mentions
2- Rockwell Automation: 11 Vulnerabilities Disclosed, Including Critical Flaw in EtherNet/IP AdapterVypr Intelligence · Jul 16, 2026
- Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogixCISA ICS Advisories