CVE-2020-14504: Rockwellautomation 1734-Aentr Point I/o Dual Port Network Adaptor Series B Firmware

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings.

Affected products

• Rockwellautomation 1734-Aentr Point I/o Dual Port Network Adaptor Series B Firmware: from 4.001, up to and including 4.005; from 5.011, up to and including 5.017
• Rockwellautomation 1734-Aentr Point I/o Dual Port Network Adaptor Series C Firmware: version 6.011 only; version 6.012 only

Published 2022-02-24. Last modified 2026-06-17.