CVE-2026-9622
HighCVSS 8.7Summary
A denial-of-service vulnerability exists in RSLinx Classic. A crafted CIP packet targeting the Forward Close service can crash the RSLinx Classic service, requiring a restart to recover.
Risk Assessment
An attack can disrupt industrial systems using RSLinx Classic, causing downtime and potentially affecting production processes.
Recommendation
Apply vendor updates and restrict access to the RSLinx Classic service to trusted hosts only.
Other vulnerabilities in RSLinx Classic
See all- CVE-2026-9625High
Denial-of-service vulnerability in RSLinx Classic. A crafted CIP packet with an oversized embedded message request can crash the RSLinx Classic service, requiring a restart to recover.
- CVE-2026-9624High
Denial-of-service vulnerability in RSLinx Classic. A crafted CIP packet can crash the RSLinx Classic service due to insufficient data length validation, requiring a restart to recover.
- CVE-2026-9621Critical
A denial-of-service issue exists in RSLinx Classic due to improper handling of a malformed packet. A crafted CIP packet can crash the service, requiring restart.
Original NVD description (English source)
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.