Description (CNA)
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Auotmation / 1715 EtherNet/IP Communications Module | affected 3.003 and prior |
CWE
CWE-306
References
ADP enrichment
No English description supplied.
No references supplied.