CVE-2026-11317: Rockwell Automation CompactLogix, ControlLogix, отказ

Описание

Оригинално описание

A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are more likely to be affected. This can result in a major nonrecoverable fault (MNRF). A program download is required to recover.

Засегнати продукти

• Rockwell Automation CompactLogix, ControlLogix: Versions prior to 34.016; Versions prior to 35.015; Versions prior to 36.012

Вид слабост

• CWE-404 Неправилно затваряне или освобождаване на ресурси

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-11317
• https://nvd.nist.gov/vuln/detail/CVE-2026-11317
• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1772.html