Rockwell Automation Armorstart® LT vulnerabilities
11 vulnerabilities
Known vulnerabilities in Rockwell Automation Armorstart® LT, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-9278rockwell automationarmorstart® lt+1
EPSS score0.49%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. After running a Burp Suite active scan, the device loses ICMP connectivity, causing the web application to become inaccessible.CVE-2025-9279rockwell automationarmorstart® lt+1EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limit Storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9282rockwell automationarmorstart® lt+1EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive limited storm tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9283rockwell automationarmorstart® lt+1EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP Step Limits Storms tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9281rockwell automationarmorstart® lt+1EPSS score0.61%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive step limit storm tests, the device rebootsCVE-2025-9466rockwell automationarmorstart® lt+1EPSS score0.63%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles EtherNet/IP and CIP grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9465rockwell automationarmorstart® lt+1EPSS score0.50%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the Achilles Comprehensive grammar tests, the device reboots unexpectedly, causing the Link State Monitor to go down for several seconds.CVE-2025-9464rockwell automationarmorstart® lt+1EPSS score0.40%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive.CVE-2025-9280rockwell automationarmorstart® lt+1EPSS score0.49%
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using Defensics causes the device to become unresponsive, requiring a reboot.CVE-2026-19472rockwell automationarmorstart® ltEPSS score0.32%
A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availabilityCVE-2026-19471rockwell automationarmorstart® ltEPSS score0.28%
Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users access the affected page.