CVE-2026-9624
HighCVSS 8.7Summary
Denial-of-service vulnerability in RSLinx Classic. A crafted CIP packet can crash the RSLinx Classic service due to insufficient data length validation, requiring a restart to recover.
Risk Assessment
An attacker can remotely crash the service, leading to communication disruptions with industrial devices and potential downtime.
Recommendation
Apply vendor-provided patches and restrict access to the service to trusted hosts only.
Other vulnerabilities in RSLinx Classic
See all- CVE-2026-9625High
Denial-of-service vulnerability in RSLinx Classic. A crafted CIP packet with an oversized embedded message request can crash the RSLinx Classic service, requiring a restart to recover.
- CVE-2026-9622High
A denial-of-service vulnerability exists in RSLinx Classic. A crafted CIP packet targeting the Forward Close service can crash the RSLinx Classic service, requiring a restart to recover.
- CVE-2026-9621Critical
A denial-of-service issue exists in RSLinx Classic due to improper handling of a malformed packet. A crafted CIP packet can crash the service, requiring restart.
Original NVD description (English source)
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a restart of the service to recover.