CVE-2026-9624— RSLinx Classic® - Multiple Vulnerabilities
Quick assessment
Affected
Rockwell Automation RSLinx Classic®
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
RSLinx® Classic 中存在一个服务拒绝（DoS）安全问题。由于对数据长度验证不足，经过精心构造的 CIP 数据包可能导致 RSLinx® Classic 服务崩溃，需要重启该服务以恢复正常运行。
Possible ATT&CK Techniques 1 AI
T1027 · Obfuscated Files or Information
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-9624
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
RSLinx Classic® - Multiple Vulnerabilities
Source: CVE Program / CVE List V5
Vulnerability Description
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a restart of the service to recover.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rockwell Automation | RSLinx Classic® | V4.50 and prior | - |
|
II. Public POCs for CVE-2026-9624
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9624
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-9624 (1)
Same Patch Batch · Rockwell Automation · 2026-09-01 · 14 CVEs total
| CVE-2026-9621 | 9.2 CRITICAL | RSLinx Classic® - Multiple Vulnerabilities |
| CVE-2026-9625 | 8.7 HIGH | RSLinx Classic® - Multiple Vulnerabilities |
| CVE-2026-9622 | 8.7 HIGH | RSLinx Classic® - Multiple Vulnerabilities |
| CVE-2026-9637 | 8.7 HIGH | CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities |
| CVE-2026-84235 | 8.7 HIGH | Rockwell Automation 1756-ENBT Denial of Service Vulnerability |
| CVE-2026-19472 | 8.7 HIGH | Rockwell Automation ArmorStart® LT Denial Of Service |
| CVE-2025-12768 | 8.6 HIGH | FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability |
| CVE-2026-16675 | 8.5 HIGH | Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation |
| CVE-2026-9634 | 7.0 HIGH | Redundancy Module Configuration Tool - Multiple Vulnerabilities |
| CVE-2026-9633 | 7.0 HIGH | Redundancy Module Configuration Tool - Multiple Vulnerabilities |
| CVE-2026-12663 | 7.0 HIGH | ControlFLASH ® – Improper Access Control |
| CVE-2026-19471 | 6.9 MEDIUM | Rockwell Automation ArmorStart® LT Stored Cross-site scripting |
| CVE-2026-12661 | 4.8 MEDIUM | FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability |
IV. Related Vulnerabilities
Same vendor: Rockwell Automation
-
CVE-2026-9634
Redundancy Module Configuration Tool - Multiple Vulnerabilit -
CVE-2026-9633
Redundancy Module Configuration Tool - Multiple Vulnerabilit -
CVE-2026-12661
FactoryTalk® Historian Machine Edition - Out-of-Bounds Write -
CVE-2025-12768
FactoryTalk® Historian Machine Edition - Out-of-Bounds Write -
CVE-2026-9625
RSLinx Classic® - Multiple Vulnerabilities
Same weakness: CWE-191
-
CVE-2026-9622
RSLinx Classic® - Multiple Vulnerabilities -
CVE-2026-82480
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLe -
CVE-2026-54754
Klever-Go: Marketplace settlement mints KLV when referral % -
CVE-2026-82250
gitoxide gix-packetline before 0.21.5 Denial of Service -
CVE-2026-78011
Fireware OS Integer Underflow in Iked Allows Unauthenticated
V. Comments for CVE-2026-9624
No comments yet