Rockwellautomation 1756-EN2TR Series C Firmware vulnerabilities

5 CVEs affecting Rockwellautomation 1756-EN2TR Series C Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8008, published 2025-09-09.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-3595, published 2023-07-12. Critical severity, CVSS 9.8. EPSS: 5.5% chance of exploitation in the next 30 days. Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with…
• CVE-2018-17924, published 2018-12-07. High severity, CVSS 8.6. EPSS: 4.3% chance of exploitation in the next 30 days. Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and…
• CVE-2023-2262, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a…
• CVE-2025-8008, published 2025-09-09. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash.
• CVE-2025-8007, published 2025-09-09. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This…