CVE-2026-93076.3MediumCWE-497
Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
Rockwell Automation · CompactLogix 5370
Not in CISA KEV
0.3%probability of exploitation in the next 30 days
22nd percentile
050100
Higher than 22% of scored CVEs
6.3MediumCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attacker to construct malicious packets, leading to Denial-of-Service.
Coverage1 article · 1 outlet
First in our coverage: CISA, 16 Jun.
- Rockwell CompactLogix flaws leak data, allow DoS attacksCISA · official notice · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.