Paper/Archive/CVE-2026-9621

CVE-2026-9621

Rockwell Automation RSLinx Classic® — RSLinx Classic® - Multiple Vulnerabilities

CVSS 9.2 (CNA)9.2 / 10 × 3027.6 Not in CISA KEV+300.0 EPSS percentile 37.1.371 × 207.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover

Affected

ProductAffectedFixed inSource

RSLinx Classic®V4.50 and prior–CNA

Scores by source

Rockwell (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refrockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1794.html