Rockwellautomation 1756-en2tr Series C Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Rockwellautomation 1756-en2tr Series C Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-2262 — CVSS 9.8 (critical): A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could…
• CVE-2023-3595 — CVSS 9.8 (critical): Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a…
• CVE-2018-17924 — CVSS 8.6 (high): Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could…
• CVE-2025-8007 — CVSS 6.5 (medium): A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close…
• CVE-2025-8008 — CVSS 6.5 (medium): A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close…