CVE-2026-0647 — Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities

CVE-2026-0647

Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities PUBLISHED

Description (CNA)

An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthorized access, account takeover, and loss of the device’s embedded web server’s availability.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / FLEX I/O EtherNet/IP Adapters	affected 2.012

CWE

CWE-306

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1775.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.