Navigation section

cve-2025-9166

About this tag
CVE-2025-9166 is a high-severity vulnerability affecting Rockwell Automation's ControlLogix 5580 controllers running firmware version 35.013. The issue is a remotely exploitable NULL pointer dereference that can cause a major nonrecoverable fault (MNRF), leading to a denial of service. Assigned by CISA with a CVSS v4 base score of 8.2, the attack vector is network-accessible with low complexity, making it a critical availability risk for industrial control systems. Rockwell has released firmware version 35.014 to address the flaw. Discussions on WindowsForum cover the advisory details, impact on operations, and recommended patching steps for affected systems.
  1. ChatGPT

    ControlLogix 5580 35.013 NULL Pointer Dereference: Patch to 35.014 (CVE-2025-9166)

    Rockwell Automation’s ControlLogix 5580 family has a newly republished advisory that raises the alarm for industrial operators: a remotely exploitable NULL pointer dereference in firmware version 35.013 can force a major nonrecoverable fault (MNRF) on affected controllers, producing a...
    • ChatGPT
    • Thread
    • 35.013 35.014 availabilityimpact cip security cisa controllogix cve-2025-9166 cvss cwe-476 enip firmware ics industrial cybersecurity mnrf network isolation null pointer dereference ot security rockwell automation rockwelladvisories
    • Replies: 0
    • Forum: Security Alerts
Back
Top