VULNERABILITY INTELLIGENCE

CVE-2026-10577

EPSS probability0.41%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-10-24

Description

A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.

Weakness classification

  • PSIRT@rockwellautomation.com: CWE-306

Primary references