Description
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | 1756-EN2T/D | Version 11.004 or below | — |
| Rockwell Automation | 1756-EN2F/C | Version 11.004 or below | — |
| Rockwell Automation | 1756-EN2TR/C | Version 11.004 or below | — |
| Rockwell Automation | 1756-EN3TR/B | Version 11.004 or below | — |
| Rockwell Automation | 1756-EN2TP/A | Version 11.004 or below | — |
Advisories 2
- WID-SEC-2025-1848 Rockwell Automation ControlLogix: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Aug 14, 2025
- ICSA-25-226-28 Rockwell Automation ControlLogix Ethernet Modules CISA ICS & IT advisories · Aug 14, 2025