CVE Catalog

CVE-2025-12011

CriticalCVSS 9.2
Published: Updated: Translated: NVD NIST

Summary

A denial-of-service vulnerability in 5370/5570 controllers allows a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).

Risk Assessment

An attacker can remotely crash the controller, leading to system downtime and potentially costly operational disruptions.

Recommendation

Update the firmware of 5370/5570 controllers to the latest version and restrict management interface access to trusted networks only.

Original NVD description (English source)

A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS