What’s Vulnerable › Vulnerabilities

CVE-2025-8007: Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-06-17
• Weakness: CWE-20

Description

A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.

Affected products

• Rockwellautomation 1756-En2Tr Series A Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En2Tr Series B Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En2Tr Series C Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En4Tr Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En4Trxt Firmware: before 7.001 — fixed in 7.001

How to fix

Upgrade to a fixed version: Rockwellautomation 1756-En2Tr Series A Firmware 7.001; Rockwellautomation 1756-En2Tr Series B Firmware 7.001; Rockwellautomation 1756-En2Tr Series C Firmware 7.001; Rockwellautomation 1756-En4Tr Firmware 7.001; Rockwellautomation 1756-En4Trxt Firmware 7.001. Check the vendor advisory for mitigations.

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1739.html

Get alerted when CVE-2025-8007 or the next vulnerability affects your stack