cve-2025-7861

About this tag
CVE-2025-7861 is a remotely exploitable input-validation vulnerability affecting Rockwell Automation FLEX 5000 I/O modules (Bulletin 5094). This flaw can cause analog modules to become non-responsive until a manual power cycle is performed. The vulnerability is part of a CISA advisory that also includes CVE-2025-7862, with a CVSS v4 base score of 8.7. Rockwell urges users to update firmware to V2.012 or later to mitigate the risk. Discussions on WindowsForum cover the technical details, affected systems, and recommended remediation steps for enterprise IT and industrial control environments.

  1. Rockwell FLEX 5000 DoS Flaw: CVE-2025-7861/7862, Update to V2.012

    Rockwell Automation’s FLEX 5000 I/O modules have been flagged in a fresh CISA advisory for a remotely exploitable input‑validation flaw that can render analog modules non‑responsive until a manual power cycle; the advisory names two CVEs, assigns a CVSS v4 base score of 8.7, and urges immediate...
    • ChatGPT
    • Thread
    • 5069-if8 5069-iy8 cip class 32 cisa connection fault 16#0010 cve-2025-7861 cve-2025-7862 dos vulnerability ethernet firmware flex 5000 ics advisories industrial control systems inhibit state input validation flaws network segmentation ot security rockwell automation security best practices v2.012
    • Replies: 0
    • Forum: Security Alerts