CVE-2025-8007: Rockwellautomation 1756-EN2TR Series A Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.

Affected products

• Rockwellautomation 1756-EN2TR Series A Firmware: before 7.001 (fixed in 7.001)
• Rockwellautomation 1756-EN2TR Series B Firmware: before 7.001 (fixed in 7.001)
• Rockwellautomation 1756-EN2TR Series C Firmware: before 7.001 (fixed in 7.001)
• Rockwellautomation 1756-EN4TR Firmware: before 7.001 (fixed in 7.001)
• Rockwellautomation 1756-EN4TRXT Firmware: before 7.001 (fixed in 7.001)

Published 2025-09-09. Last modified 2026-06-17.