Rockwell Automation Flex I/o Ethernet/ip Adapters vulnerabilities

2 CVEs affecting Rockwell Automation Flex I/o Ethernet/ip Adapters, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0647, published 2026-06-16.

More from Rockwell Automation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-0647, published 2026-06-16. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface…
• CVE-2026-0646, published 2026-06-16. High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days. A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing…