Filtered by vendor Rockwellautomation Subscriptions
Filtered by product Flex I/o Ethernet/ip Adapter Subscriptions

Search

Switch to Advanced Search (Beta)
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-0646 1 Rockwellautomation 1 Flex I/o Ethernet/ip Adapter 2026-06-26 N/A
A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual reset to recover.
CVE-2026-0647 1 Rockwellautomation 1 Flex I/o Ethernet/ip Adapter 2026-06-26 N/A
An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthorized access, account takeover, and loss of the device’s embedded web server’s availability.