Medium severityNVD Advisory· Published Jun 16, 2026· Updated Jun 16, 2026
CVE-2026-9307
CVE-2026-9307
Description
A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attacker to construct malicious packets, leading to Denial-of-Service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- Rockwell Automation CompactLogixCISA ICS Advisories