Rockwell Automation ControlLogix Ethernet Modules
Successful exploitation of this vulnerability could allow remote attackers to perform memory dumps, modify memory, and control execution flow.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-7353US | —OT elevated | — | ||
A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB ag… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-226-28 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-226-28 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- Mitigation1756-EN2F/C
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN2T/D
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN2TP/A
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN2TR/C
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101 - Mitigation1756-EN3TR/B
Rockwell Automation recommends that ControlLogix Ethernet Module users update to Version 12.001 if possible. If users are not able to upgrade to Version 12.001, security best practices should be applied.
https://compatibility.rockwellautomation.com/Pages/ProductReplacement.aspx?crumb=101
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan