This vulnerability involves the unauthorized exposure of CIP Connection IDs via the diagnostics webpage of the CompactLogix 5370 controller's web server. These identifiers are accessible to any unauthenticated user on the network, potentially allowing an attacker to use this information to construct malicious packets. The resulting impact can be denial-of-service against the affected device. The CVSS 4.0 base score is 6.3, reflecting a network attack vector with low complexity and no required privileges or user interaction, but requiring attacker presence on the network and partial impact on confidentiality.

Exposure of CIP Connection IDs to unauthenticated network users may enable attackers to craft malicious packets that cause denial-of-service conditions on the affected CompactLogix 5370 controller. There is no indication of impact on integrity or availability beyond denial-of-service, nor evidence of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented. Until a patch is available, restrict network access to the controller's web server to trusted users only to reduce exposure.