Approved changes feed: RSS · Atom

cpe:2.3:a:rockwell_automation:flex_i/o_ethernet/ip_adapters:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545)
ProductFlex I/O Ethernet/Ip Adapters (5e893d14-0bd1-5775-b148-cabafcdc6fa4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0647 vulnerable 2026-07-29 00:20:51.357134 Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities
An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthorized access, account takeover, and loss of the device’s embedded web server’s availability.
Published: 2026-06-16T14:20:12.535Z
Updated: 2026-06-16T15:23:45.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0646 vulnerable 2026-07-29 00:20:51.356912 Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities
A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual reset to recover.
Published: 2026-06-16T14:19:21.386Z
Updated: 2026-06-16T15:24:33.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.