You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
1756 en modules
About this tag
The tag 1756 en modules covers Rockwell Automation 1756-series ControlLogix communication modules, specifically models such as 1756-ENT2R, 1756-EN4TR, and 1756-EN4TRXT. Discussions focus on critical security vulnerabilities, including CVE-2025-8007/8008 which can cause denial-of-service via malformed Forward Close messages, and CVE-2025-7353, a high-severity flaw allowing remote memory access and potential control over execution flow. Firmware upgrades to version 7.001 or later are recommended for mitigation. Topics also include network isolation and layered detection for industrial control system environments.
Rockwell Automation has issued—and CISA has republished—an advisory warning that specific 1756-series communication modules can enter a Major Non‑Recoverable fault or crash when presented with malformed or concurrent Forward Close messages, creating a practical denial‑of‑service risk for...
Rockwell Automation’s ControlLogix EtherNet/IP communication modules have been publicly flagged for a high-severity vulnerability that, if left unaddressed, can grant remote attackers direct, low-complexity access to a running module’s memory — enabling memory dumps, arbitrary memory...