CVE-2025-14027
Denial-of-Service in Rockwell Automation Devices Causes System Hang
Publication date: 2026-01-20
Last updated on: 2026-01-20
Assigner: Rockwell Automation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rockwell_automation | 1756-rm2 | * |
| rockwell_automation | 1756-rm3 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-401 | The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves multiple denial-of-service (DoS) issues in the 1756-RM2 ControlLogix Redundancy Module. It can be triggered by specially crafted inputs such as malformed Class 3 messages, memory leaks, and other resource exhaustion scenarios. Exploiting these issues can cause the device to become unresponsive or suffer a major nonrecoverable fault, potentially requiring a restart to recover. [1]
How can this vulnerability impact me? :
Exploitation of this vulnerability can cause the affected device to become unresponsive or experience a major nonrecoverable fault. This can disrupt critical industrial operations relying on the 1756-RM2 ControlLogix Redundancy Module, potentially leading to downtime and requiring a device restart to recover. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
The provided resources do not include specific detection methods or commands to identify this vulnerability on your network or system.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include following Rockwell Automation's security best practices as a workaround and considering upgrading to the newer 1756-RM3 module, as no firmware correction is currently available for the affected 1756-RM2 module. Additionally, subscribing to security alerts and contacting Rockwell Automation TechConnect for support is recommended. [1]