VULNERABILITY INTELLIGENCE
CVE-2026-9653
CVSS score8.7 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-07-14
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.
Weakness classification
- CWE-354: Improper Validation of Integrity Check Value