CVE-2025-11743
HighSummary
A denial-of-service vulnerability in the affected product. It occurs when a malformed CIP Forward Open message is sent, potentially causing a major nonrecoverable fault requiring a restart to recover.
Risk Assessment
An attacker can remotely trigger a system fault, leading to downtime and requiring manual intervention. This may disrupt industrial processes or critical operations, causing financial and operational losses.
Recommendation
Apply available patches or updates from the vendor. Restrict network access to devices using the CIP protocol by implementing network segmentation and firewall rules.
Other vulnerabilities in CIP-enabled device
Original NVD description (English source)
A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open message is sent. This could result in a major nonrecoverable fault a restart is required to recover.