How severe is CVE-2025-8007?

CVE-2025-8007 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2025-8007 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-8007?

CVE-2025-8007 primarily affects Rockwellautomation 1756-en2tr Series A Firmware. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2025-8007?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-8007 have an EU (EUVD) identifier?

Yes. CVE-2025-8007 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-27254.

When was CVE-2025-8007 published?

CVE-2025-8007 was published on 2025-09-09 and last updated on 2026-06-17.

CVE-2025-8007

CVE-2025-8007 is a medium-severity vulnerability in Rockwellautomation 1756-en2tr Series A Firmware with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-20.

Key facts

Severity: Medium (CVSS 3.x base score 6.5)
CVSS v4: 7.1
EPSS exploit prediction: 0% (15th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-27254
Weakness: CWE-20
Affected product: Rockwellautomation 1756-en2tr Series A Firmware
Published: 2025-09-09
Last modified: 2026-06-17

Description

A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.

Frequently asked questions

What is CVE-2025-8007?: A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.
How severe is CVE-2025-8007?: CVE-2025-8007 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2025-8007 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-8007?: CVE-2025-8007 primarily affects Rockwellautomation 1756-en2tr Series A Firmware. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2025-8007?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-8007 have an EU (EUVD) identifier?: Yes. CVE-2025-8007 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-27254.
When was CVE-2025-8007 published?: CVE-2025-8007 was published on 2025-09-09 and last updated on 2026-06-17.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1739.html

Affected products (5)

cpe:2.3:o:rockwellautomation:1756-en2tr_series_a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:rockwellautomation:1756-en2tr_series_b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:rockwellautomation:1756-en2tr_series_c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:rockwellautomation:1756-en4trxt_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Rockwellautomation 1756-en2tr Series A Firmware

CVE-2023-2262 — Critical (CVSS 9.8): A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited,…
CVE-2023-3595 — Critical (CVSS 9.8): Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products,…
CVE-2018-17924 — High (CVSS 8.6): Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote…
CVE-2025-8008 — Medium (CVSS 6.5): A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a…

All CVEs affecting Rockwellautomation 1756-en2tr Series A Firmware →

Other CWE-20 (Improper Input Validation) vulnerabilities

CVE-2026-48316 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
CVE-2026-48281 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
CVE-2026-48277 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
CVE-2026-48055 — Critical (CVSS 10.0): Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and…
CVE-2026-34910 — Critical (CVSS 10.0): A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS…
CVE-2026-33587 — Critical (CVSS 10.0): Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and…

Browse all CWE-20 (Improper Input Validation) vulnerabilities →