Rockwellautomation 1756-en4tr Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Rockwellautomation 1756-en4tr Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-3493 — CVSS 8.6 (high): A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data)…
• CVE-2023-3596 — CVSS 7.5 (high): Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to…
• CVE-2024-8626 — CVSS 7.5 (high): Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could…
• CVE-2025-8007 — CVSS 6.5 (medium): A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close…
• CVE-2025-8008 — CVSS 6.5 (medium): A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close…