Rockwell Automation CompactLogix 5370/ControlLogix 5570 CIP DoS Vulnerability (CVE-2026-1137)

Denial of Service Vulnerability in Logix 5370 and 5570 Controllers via CIP Vulnerability Overview Severity: High CVE ID: CVE-2026-1137 Published Date: June 16, 2026 Last Updated: June 16, 2026 Revision Number: 1.0 Known Exploits: No Patched: Yes Workarounds: No Affected Products Affected Products: - CompactLogix 5370 - Compact GuardLogix 5370 - ControlLogix 5570 - GuardLogix 5570 Firmware Versions: - CompactLogix 5370: Versions lower than 34.016 - Compact GuardLogix 5370: Versions lower than 35.015 - ControlLogix 5570: Versions lower than 36.012 - GuardLogix 5570: Versions lower than 37.011 Resolution Fixed Versions: - CompactLogix 5370: Version 34.016 and higher - Compact GuardLogix 5370: Version 35.015 and higher - ControlLogix 5570: Version 36.012 and higher - GuardLogix 5570: Version 37.011 and higher Security Impact CVSS 3.1 Base Score: 7.5/10 CVSS 4.0 Base Score: 8.7/10 CWE: CWE-404: Improper Resource Shutdown or Release Known Exploits: Not listed in the KEV database Mitigations For customers unable to upgrade to the fixed version, implementing best security practices is recommended. Revision History Revision Number: 1.0 Date: June 16, 2026 Description: Initial release Glossary CIP Message: Encompasses the complete suite of messages and services used for manufacturing automation applications, including control, safety, synchronization, motion, configuration, and information. Denial of Service (DoS): A malicious attempt to disrupt the normal functioning of a target server, service, or network by overwhelming it. Major Non-Recoverable Fault (MNRF): An error occurring in a system or device that causes it to fail to operate normally. Stay Up to Date with Product Security Information Visit the Rockwell Automation Security Bulletins page: - Subscribe to Product Security Alerts - View Current Rockwell Automation Security Bulletins - Report Potential Security Issues with Rockwell Automation Products - Learn More About the Vulnerability Policy Support If you have any questions regarding security issues, contact TechConnect for assistance. For more information, visit Contact Us. If you have any questions regarding this disclosure, contact PSIRT. Email: rsec@rsa.rockwell.com Legal Disclaimer Rockwell Automation does not guarantee the completeness, timeliness, or accuracy of the data contained in this document. All information is provided "as is," and Rockwell Automation assumes no responsibility for any direct or indirect losses. Certain jurisdictions may not allow the exclusion of implied warranties; therefore, this disclaimer may not apply to you.

Goal Reached Thanks to every supporter — we hit 100%!

Rockwell Automation CompactLogix 5370/ControlLogix 5570 CIP DoS Vulnerability (CVE-2026-1137)