Critical severity · published Jul 14, 2026
CVE-2026-10577
Rockwell Automation 1715 Redundant IO – Access Control Vulnerability
10.0
CVSS
0.4%
EPSS
No
On KEV
Description
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1E
1715 EtherNet/IP Communications Module · Rockwell Auotmation
3.003 and prior · source: vendor
In the news
VulnerabilityCritical
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
View CSAF
Summary
Successful exploitation of this vulnerability could allow an attacker to read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.
The following versions of Rockwell Automation 1715-AENTR EtherNet/IP Adapter are affected:
1715-AENTR EtherNet/IP Adapter <=3.003 (CVE-2026-10577)
CVSS
Vendor
Equipment
Vulnerabilities
v3 10
Rockwell Automation
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
Missing Authentication for Critical Function
Background
Critical Infrastructure Sectors: Energy, Water and Wastewater, Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: United States
Vulnerabilities
Expand All +
CVE-2026-10577
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.
View CVE Details
Affected Products
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
Vendor: Rockwell Automation
Product Version: Rockwell Auto...
Jul 14, 2026·CISA Advisories
Affected product
1E
1715 EtherNet/IP Communications Module
Rockwell Auotmation
