This vulnerability involves the exposure of CIP Connection IDs on the diagnostics webpage of Rockwell Automation CompactLogix 5370 controllers. These IDs are accessible to any unauthenticated user on the network, representing a sensitive information disclosure (CWE-497). An attacker with this information could potentially use it to construct malicious packets that lead to Denial-of-Service attacks against the controller. The CVSS 4.0 base score is 6.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, but with partial attack complexity due to the need for some attacker preparation.

The primary impact is the disclosure of sensitive CIP Connection IDs to unauthenticated network users. This information disclosure can be leveraged to perform Denial-of-Service attacks against the affected controller. There is no indication of code execution or data modification, and no known exploits are reported in the wild at this time.

No official patch or remediation level has been provided by the vendor as of the published date. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the controller's web server to trusted users only and monitor for unusual network activity related to CIP connections.