CVE-2026-84235

HighCVSS 8.7

Published: 01/09/2026(UTC)Updated: 01/09/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

A denial-of-service security issue exists in the affected product. The issue stems from a crafted CIP packet crashing the module, requiring a restart to recover.

Risk Assessment

An attacker could cause device unavailability, potentially disrupting industrial processes and requiring manual intervention.

Recommendation

Restrict access to the industrial network and apply vendor updates if available.

Other vulnerabilities in CIP-enabled device

CVE-2025-11743High
A denial-of-service vulnerability in the affected product. It occurs when a malformed CIP Forward Open message is sent, potentially causing a major nonrecoverable fault requiring a restart to recover.

Original NVD description (English source)

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover.