Skip to content
NewA calmer, faster ZeroHour
Advisorymedium

Rockwell Automation Logix Platform

CISA Advisoriesby CISA ()1
Read at cisa.gov
AI summary · glm-5.3-flashSummaries by Vani AI

CISA warns Rockwell Automation Logix controllers (ControlLogix, CompactLogix, GuardLogix) up to V36.012 are affected by CVE-2026-9637 (CVSS 7.5).

CISA published ICS advisory ICSA-26-244-03 covering the Rockwell Automation Logix Platform. Affected products include ControlLogix 5580, CompactLogix 5380, GuardLogix 5580, and Compact GuardLogix 5380 running firmware through V33 and selected V34-V36 releases. The underlying vulnerability is tracked as CVE-2026-9637 with a vendor CVSS v3 score of 7.5. The advisory provides guidance for industrial operators to update affected controllers.

Key facts
  • Affects multiple Logix controller families through firmware V36.012
  • CVE-2026-9637 carries a CVSS v3 base score of 7.5
  • No active exploitation is reported in the advisory
Analyze CVE-2026-9637 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-9637
Tags
advisorycisacontrollogixguardlogixicsplcrockwell-automation
Vendors
Rockwell AutomationCISA
Products
Logix PlatformControlLogix 5580CompactLogix 5380GuardLogix 5580

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-9637
Unauthenticated DoS in Rockwell Automation Logix controllers via CIP length flaw
8.7<1%

From the original article

View CSAF Summary The following versions of Rockwell Automation Logix Platform are affected: ControlLogix 5580 <=V33, V34. 011-V34. 014, V35.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.