CVE-2025-7353criticalCWE-1188

CVE-2025-7353: critical vulnerability in Rockwell Automation 1756-EN2F/C

Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor 1756-EN2F/C+ Monitor 1756-EN2T/D

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.9%
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Rockwell Automation · 1756-EN2F/CRockwell Automation · 1756-EN2T/DRockwell Automation · 1756-EN2TP/ARockwell Automation · 1756-EN2TR/CRockwell Automation · 1756-EN3TR/B