ICSA-25-226-31

Rockwell Automation 1756-EN4TR, 1756-EN4TRXT (Update B)

view advisory published 2025-08-14

Successful exploitation of these vulnerabilities could result in an attacker causing a denial of service condition.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-8008US	medium6.5	0.68% (52nd)	—	2025-09-09
A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash.
CVE-2025-8007US	medium6.5	0.26% (18th)	—	2025-09-09
A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MN…

External citations — patches, advisories, analysis.

Mitigation1756-EN4TR
Rockwell Automation also recommends users follow their published Security Best Practices.
https://support.rockwellautomation.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight
Mitigation1756-EN4TR
Rockwell Automation also recommends users follow their published Security Best Practices.
https://support.rockwellautomation.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight
Mitigation1756-EN4TRXT
Rockwell Automation also recommends users follow their published Security Best Practices.
https://support.rockwellautomation.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight
Mitigation1756-EN4TRXT
Rockwell Automation also recommends users follow their published Security Best Practices.
https://support.rockwellautomation.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.