CVE-2026-10577: Rockwell Automation 1715 Redundant IO – Access Control Vulnerability

Severity: critical (CVSS 10.0 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-14 · updated 2026-10-24
Weakness: CWE-306

Description

A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.

Affected products

Rockwell Auotmation 1715 EtherNet/IP Communications Module: through 3.003

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1785.html

Get alerted when CVE-2026-10577 or the next vulnerability affects your stack