CVE-2025-9464
High
Description
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is triggered during fuzzing of multiple CIP classes, which causes the CIP port to become unresponsive.
SeverityHigh
CVSS7.5
Exploit probability—
ProductRockwellautomation Armorstart Lt Firmware
PublishedJan 20, 2026
First seenJan 20, 2026
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation armorstart_lt_firmware | v ≤ 2.002 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.