Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-9636

Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability

A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been revoked via a Certificate Revocation List (CRL). This could allow a network-based attacker to establish a connection using a certificate that should be untrusted, potentially bypassing CIP Security protections.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4tr Compact Guardlogix 5380 Compactlogix 5380 and 2 more
CVE-2025-8007

Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability

A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en2tr Series A 1756-en2tr Series A Firmware 1756-en2tr Series B and 8 more
CVE-2024-3493

Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4tr 1756-en4tr Firmware Compact Guardlogix 5380 and 13 more
CVE-2023-3596

Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4tr 1756-en4tr Firmware 1756-en4trk and 3 more
CVE-2024-8626

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4tr 1756-en4tr Firmware Compact Guardlogix 5380 and 9 more