CVE-2025-9042 - CVE House
Back to Database
Status published High CVE-2025-9042

Rockwell Automation FLEX 5000 I/O - Module Fault

Vulnerability Description

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault (Code 16#0010), and the module cannot recover without a power cycle.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9042

Credits & Attribution

No credits recorded in the NVD database.

References

More from Rockwell Automation

View All →
CVE-2025-9466
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
High 8.7
CVE-2025-9465
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
High 8.7
CVE-2025-9464
Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities
High 8.7
CVE-2025-9437
Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability
High 8.7
CVE-2025-9368
432ES-IG3 Series A Denial-of-Service Vulnerability
High 8.7

Affected Vendor

Rockwell Automation

View all reports →

Affected Software

FLEX 5000 I/O
Vulnerable Versions:
Version 2.011 or below

Timeline

Official Publish: August 14th, 2025
Last Modified: August 14th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-1287

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.