Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-10577 EUVD-2026-43675GHSA-79wc-xmfc-9mc6

Rockwell Automation 1715 Redundant IO – Access Control Vulnerability

Published Jul 14, 2026 · Updated Jul 14, 2026 · Assigned by Rockwell

Description

A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.

Affected products

VendorProductAffectedFixed
Rockwell Auotmation 1715 EtherNet/IP Communications Module 3.003 and prior —

Advisories 1

References