CVE Catalog

CVE-2025-12012

CriticalCVSS 9.2
Published: Updated: Translated: NVD NIST

Summary

A denial-of-service vulnerability in 5380/5480/5580 controllers allows a malicious user to write invalid file data to the device, causing a major non-recoverable fault (MNRF).

Risk Assessment

An attacker can cause permanent controller failure, leading to disruption of systems managed by the device and potentially costly downtime.

Recommendation

Immediately apply the available security patch from the vendor and restrict access to the controllers to trusted networks and users only.

Original NVD description (English source)

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS