Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-9653

1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation 1756-EN2, 1756-EN3

Default version status: unaffected

  • 12.001 and beforeaffected

Rockwell Automation 1756-ENBT

Default version status: unaffected

  • 6.006affected

References