Denial-of-Service in Rockwell Automation 1794-AENTR Adapter
CVE-2026-0646

8.7HIGH

Key Information:

Vendor: Rockwell Automation
Status: Flex I/o Ethernet/ip Adapters
Vendor: CVE Published:; 16 June 2026

🔔 Create Rockwell Automation Vulnerability Alert

What is CVE-2026-0646?

A denial-of-service issue has been identified in the Rockwell Automation 1794-AENTR adapter due to improper memory handling during the processing of CIP protocol requests. This flaw can lead to the adapter becoming unresponsive and severing its connection to associated I/O modules, necessitating a manual reset for full operational recovery. Users of the affected adapter should pay close attention to this vulnerability to prevent disruptions in connectivity.

Affected Version(s)

FLEX I/O EtherNet/IP Adapters 2.012

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:

8.7

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 16, 2026
Vulnerability Reserved
Jan 6, 2026

CVE-2026-0646 Data

JSON