FLEX 5000 I/O vulnerabilities

2 known vulnerabilities in FLEX 5000 I/O from Rockwell Automation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  FLEX 5000 I/O: Improper Validation of Specified Type of Input

  CVE-2025-9042Aug 14, 2025Rockwell Automation

  A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection faul

• 8.7 High severity

  FLEX 5000 I/O: Improper Validation of Specified Type of Input

  CVE-2025-9041Aug 14, 2025Rockwell Automation

  A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection faul