Vulnerabilities

CVSS

8.7 High

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Risk score

69.6

Published

2026-06-16

Status

Published

A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual reset to recover.

Weaknesses

CWE-401

Coverage 1

vulnerability

Rockwell Automation FLEX I/O EtherNet/IP Adapters

This CISA advisory details vulnerabilities within Rockwell Automation’s FLEX I/O EtherNet/IP Adapters (versions 2.012) that could allow unauthorized access and potential loss of device availability. The issues include a…

CISA Advisories · Jun 16, 2026 High

CVE-2026-0646CVE-2026-0647USethernet/ipcontrol systemsmemory corruption

All articles mentioning it

Advisories and references

• rockwellautomation.com/en-us/trust-center/security-advisories/adviso...