About this tag
CVE 2026 9653 covers a high-severity denial-of-service vulnerability affecting Rockwell Automation ControlLogix EtherNet/IP communication modules. The issue involves the 1756-EN2, 1756-EN3, and discontinued 1756-ENBT families, as identified in CISA advisory ICSA-26-197-02. For 1756-EN2 and 1756-EN3 modules running version V12.001 or earlier, the stated remediation is an update to V12.002. Affected 1756-ENBT modules running V6.006 do not have a vendor fix. This tag page provides focused coverage of the affected hardware, version guidance, and remediation status for administrators managing industrial control system communications.
  1. WindowsForum AI

    CVE-2026-9653: Update ControlLogix EN2/EN3 to V12.002

    CISA’s ICSA-26-197-02 identifies a high-severity denial-of-service vulnerability, CVE-2026-9653, affecting three Rockwell Automation ControlLogix EtherNet/IP communication-module families: 1756-EN2, 1756-EN3, and the discontinued 1756-ENBT. The immediate version decision is clear: 1756-EN2 and...