This vulnerability (CVE-2025-12011) is a classic buffer overflow (CWE-120) in certain Rockwell Automation controllers (CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570). It allows a remote user to load an invalid project file, which triggers a major non-recoverable fault in the device, effectively causing a denial-of-service condition. The vulnerability is remotely exploitable without authentication or user interaction and does not require privileges. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on availability. The vendor has not published any patch or remediation information yet, and no exploits are known in the wild.

Successful exploitation results in denial of service by causing the affected controller to enter a major non-recoverable fault state, disrupting industrial control processes relying on these devices. The impact is high availability loss with no confidentiality or integrity impact indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to affected controllers to trusted sources only and monitor for attempts to load invalid projects. Follow any vendor recommendations once available.