PT-2026-58051 · Rockwell Automation · 1756-En2F+1

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-9653

NVD

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.

Correção

Enumeração de Fraquezas

CWE-354

Identificadores relacionados

CVE-2026-9653

Produtos afetados

1756-En2F

1756-Enbt

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-9653 · Nota de Segurança
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1780.html · Nota