FLEX I/O EtherNet/IP Adapters vulnerabilities

2 known vulnerabilities in FLEX I/O EtherNet/IP Adapters from Rockwell Automation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FLEX I/O EtherNet/IP Adapters: Missing Authentication for Critical Functionality

  CVE-2026-0647Jun 16, 2026Rockwell Automation

  An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoin

• 8.7 High severity

  FLEX I/O EtherNet/IP Adapters: Missing Release of Memory after Effective Lifetime

  CVE-2026-0646Jun 16, 2026Rockwell Automation

  A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual rese