Vulnerability Description
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-11694?
CVE-2025-11694 is a documented vulnerability. A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Co...
How severe is CVE-2025-11694?
CVSS scoring is not yet available for CVE-2025-11694. Check NVD for updates.
Is there a patch for CVE-2025-11694?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.