Vulnerability Intelligence Report
Rockwell Automation 1715 Redundant IO – Access Control Vulnerability
CVE-2026-10577
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-306 ↗CWE-306 Missing authentication for critical function
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Rockwell Auotmation | 1715 EtherNet/IP Communications Module | 3.003 and prior (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Rockwell Automation · Vendor · USA |
| Reserved | 2026-06-01T17:15:25 |
| Published | 2026-07-14T12:52:40 |
| Last Updated | 2026-07-14T13:19:49 |
Community Chatter & Buzz