Skip to content
OpenAdvisories
Critical ICSA-26-167-05 2 CVEs

Rockwell Automation FLEX I/O EtherNet/IP Adapters

Published Jun 16, 2026 · Updated Jun 16, 2026

Vendor: Rockwell Automation Product: 1794-AENTR Product: 1794-AENTRXT

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, account takeover, and cause loss of availability.

Vulnerabilities 2

  • High 8.8
    CVE-2026-0647

    Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities

    An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoi…

    Rockwell Automation FLEX I/O EtherNet/IP Adapters ICS / OT
  • High 8.7
    CVE-2026-0646

    Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities

    A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual res…

    Rockwell Automation FLEX I/O EtherNet/IP Adapters ICS / OT

Revision history

  1. #1

    Initial Republication of Rockwell Automation Security Advisory SD1775

References