CVE-2026-10577CWE-306

Rockwell Automation 1715 Redundant IO – Access Control Vulnerability

Critical · published July 14, 2026

CVSS v4.0
10.0
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00406 · 33.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-07-14T12:52Z
EPSS history
Timeline
  • 14 JUL 12:52Z
    Rockwell Automation 1715 Redundant IO – Access Control Vulnerability
    cvelistv5