CVE-2025-11698: rockwell automation compactlogix® 5380 recovery image compact guardlogix® 5380 recovery image compactlogix® 5480 recovery image controllogix® 5580 recovery image guardlogix® 5580 recovery image Classic Buffer Overflow

Vulnerability summary

CVE-2025-11698 is a critical (CVSS 9.2) Classic Buffer Overflow vulnerability in rockwell automation compactlogix® 5380 recovery image compact guardlogix® 5380 recovery image compactlogix® 5480 recovery image controllogix® 5580 recovery image guardlogix® 5580 recovery image. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 35.9% of scored vulnerabilities.

Timeline

1. 14-07-2026
   PublishedVulnerability first disclosed.
2. 14-07-2026
   Last modifiedVulnerability information updated.

Description

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.