Vulnerability Spotlight: Denial-of-service vulnerability in Rockwell Automation RSLinx
Summary: Cisco Talos discovered a denial-of-service vulnerability in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3, which serves as a communication server for the MicroLogix 1100 Programmable Controller. An attacker can send a sequence of specially crafted network packets to trigger the denial of service, and Talos worked with Rockwell Automation under its coordinated disclosure policy to resolve the issue and make an update available.
Bottom line: RSLinx Classic sits between plant devices and other Rockwell server and client applications, so a denial of service against it can cut the communication path for the MicroLogix 1100 Programmable Controller it serves. Talos confirmed the flaw only in version 2.57.00.14 CPR 9 SR 3 and published Snort rule 56208 to detect exploitation attempts.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2020-13573
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026