CVE-2026-0646 — Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities

CVE-2026-0646

Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities PUBLISHED

Description (CNA)

A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual reset to recover.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / FLEX I/O EtherNet/IP Adapters	affected 2.012

CWE

CWE-401

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1775.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.