CVE-2025-7353: Rockwell Automation 1756-EN2F/C

Critical severity, CVSS 9.3. EPSS: 0.9% chance of exploitation in the next 30 days.

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.

Affected products

• Rockwell Automation 1756-EN2F/C: up to and including 11.004
• Rockwell Automation 1756-EN2T/D: up to and including 11.004
• Rockwell Automation 1756-EN2TP/A: up to and including 11.004
• Rockwell Automation 1756-EN2TR/C: up to and including 11.004
• Rockwell Automation 1756-EN3TR/B: up to and including 11.004

Published 2025-08-14. Last modified 2026-06-17.