Vulnerabilities

CVSS

8.7 High

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Risk score

69.6

Published

2026-07-14

Status

Published

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.

Weaknesses

CWE-354

Coverage 1

vulnerability

Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT

Rockwell Automation has released a vulnerability in its 1756-EN2, 1756-EN3, and 1756-ENBT communication modules. Exploitation could lead to a denial-of-service condition. Users are advised to update to the latest version…

CISA Advisories · Jul 16, 2026 High

CVE-2026-9653vulnerabilitycontrol systemscisa

All articles mentioning it

Advisories and references

• rockwellautomation.com/en-us/trust-center/security-advisories/adviso...