What’s Vulnerable › Vulnerabilities

CVE-2025-8008: Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-06-17
• Weakness: CWE-755

Description

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash.

Affected products

• Rockwellautomation 1756-En2Tr Series A Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En2Tr Series B Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En2Tr Series C Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En4Tr Firmware: before 7.001 — fixed in 7.001
• Rockwellautomation 1756-En4Trxt Firmware: before 7.001 — fixed in 7.001

How to fix

Upgrade to a fixed version: Rockwellautomation 1756-En2Tr Series A Firmware 7.001; Rockwellautomation 1756-En2Tr Series B Firmware 7.001; Rockwellautomation 1756-En2Tr Series C Firmware 7.001; Rockwellautomation 1756-En4Tr Firmware 7.001; Rockwellautomation 1756-En4Trxt Firmware 7.001. Check the vendor advisory for mitigations.

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1739.html

Get alerted when CVE-2025-8008 or the next vulnerability affects your stack