Rockwell Automation 1756-ENBT Module
Rockwell's 1756-ENBT ControlLogix EtherNet/IP bridge (all versions) is vulnerable to DoS via crafted CIP packets, crashing the module until manual restart.
CISA republished Rockwell Automation's advisory for CVE-2025-10478, a CWE-754 flaw affecting all versions of the 1756-ENBT ControlLogix EtherNet/IP bridge, scored CVSS 7.5. A crafted CIP packet can crash the module, and the device requires a restart to recover. Affected critical infrastructure sectors include critical manufacturing, food and agriculture, transportation systems, and water. No public exploitation has been reported; CISA recommends minimizing network exposure.
- CVE-2025-10478 (CVSS 7.5) is a DoS flaw in the 1756-ENBT EtherNet/IP bridge
- A crafted CIP packet crashes the module; manual restart required for recovery
- All module versions are affected; no public exploitation reported
- CISA recommends limiting network exposure and placing devices behind firewalls
- CVEs
- CVE-2025-10478
- Vendors
- Rockwell Automation
- Products
- 1756-ENBT Module
- Organizations
- CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-10478 | — | — | — |
From the original article
2 min read at cisa.govView CSAF Summary Successful exploitation of this vulnerability could crash the module. The device requires a restart to recover. The following versions of Rockwell Automation 1756-ENBT Module are affected: 1756-ENBT module vers:all/* (CVE-2025-10478) CVSS Vendor Equipment Vulnerabilities v3 7.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.