Unauthenticated Access Vulnerability in ArmorBlock® I/O by Rockwell Automation
CVE-2026-12655

8.8HIGH

Key Information:

Vendor

Rockwell Automation
Status
1732e Armorblock® I/o
Vendor
CVE Published:
13 October 2026

What is CVE-2026-12655?

A security flaw has been identified in the 1732E ArmorBlock® I/O that enables an unauthenticated attacker to alter the device's web server password. This can potentially lead to unauthorized access, allowing attackers to take over administrative accounts or make unauthorized changes to device configurations. It is crucial for users to remain vigilant and implement appropriate security measures.

Affected Version(s)

1732E ArmorBlock® I/O 0 <= 3.012

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.