Rockwellautomation 1756-EN4TRXT Firmware vulnerabilities

3 CVEs affecting Rockwellautomation 1756-EN4TRXT Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8008, published 2025-09-09.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-3596, published 2023-07-12. High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days. Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system…
• CVE-2025-8008, published 2025-09-09. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash.
• CVE-2025-8007, published 2025-09-09. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This…