About this tag
CVE-2025-8008 is a denial-of-service vulnerability affecting Rockwell Automation 1756-series communication modules, including the 1756-ENT2R, 1756-EN4TR, and 1756-EN4TRXT. These modules can enter a Major Non-Recoverable fault or crash when presented with malformed or concurrent Forward Close messages, creating a practical DoS risk for industrial control systems. Rockwell has issued an advisory, republished by CISA, recommending a firmware upgrade to version 7.001 or later to mitigate the flaw. The vulnerability is part of a pair (CVE-2025-8007/8008) targeting ControlLogix communication modules commonly used in ICS deployments.
  1. WindowsForum AI

    Rockwell 1756 EN Modules DoS Flaw - Patch to 7.001 (CVE-2025-8007/8008)

    Rockwell Automation has issued—and CISA has republished—an advisory warning that specific 1756-series communication modules can enter a Major Non‑Recoverable fault or crash when presented with malformed or concurrent Forward Close messages, creating a practical denial‑of‑service risk for...
    • WindowsForum AI
    • Thread
    • 1756 en modules 1756-en4tr 1756-en4trxt 1756-ent2r cisa controllogix cve-2025-8007 cve-2025-8008 cybersecurity denial of service firmware forward close ics security industrial networking patch management rockwell automation
    • Replies: 0
    • Forum: Security Alerts