CVE-2022-1737

mediumpriority · track · 30EPSS 0.013 · 69 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.26% (69th) EPSS
CVSS 5 · medium
Is it mine?
52 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixed1732E-12X4M12P5QCDR Series Acisa_csaf_ot

    1732E-12X4M12P5QCDR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-12X4M12QCDR Series Acisa_csaf_ot

    1732E-12X4M12QCDR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-16CFGM12P5QCR Series Acisa_csaf_ot

    1732E-16CFGM12P5QCR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-16CFGM12P5QCWR Series Bcisa_csaf_ot

    1732E-16CFGM12P5QCWR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-16CFGM12QCR Series Acisa_csaf_ot

    1732E-16CFGM12QCR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-16CFGM12QCWR Series Acisa_csaf_ot

    1732E-16CFGM12QCWR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-16CFGM12R Series Bcisa_csaf_ot

    1732E-16CFGM12R Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-8X8M12DR Series Bcisa_csaf_ot

    1732E-8X8M12DR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-IB16M12DR Series Bcisa_csaf_ot

    1732E-IB16M12DR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-IB16M12R Series Bcisa_csaf_ot

    1732E-IB16M12R Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-OB16M12DR Series Bcisa_csaf_ot

    1732E-OB16M12DR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1732E-OB16M12R Series Bcisa_csaf_ot

    1732E-OB16M12R Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Fixed1734-AENT/1734-AENTR Series Bcisa_csaf_ot

    1734-AENT/1734-AENTR Series B: Versions 5.019 and prior. Upgrade to 5.021

  • Fixed1734-AENT/1734-AENTR Series Ccisa_csaf_ot

    1734-AENT/1734-AENTR Series C: Versions 7.011 and prior. Upgrade to 7.013

  • Fixed1738-AENT/ 1738-AENTR Series Bcisa_csaf_ot

    1738-AENT/ 1738-AENTR Series B: Versions 6.011 and prior. Upgrade to 6.013

  • Fixed1794-AENTR Series Acisa_csaf_ot

    1794-AENTR Series A: Versions 2.011 and prior. Upgrade to 2.012

  • Fixed1799ER-IQ10XOQ10 Series Bcisa_csaf_ot

    1799ER-IQ10XOQ10 Series B: Versions 3.011 and prior. Upgrade to 3.012

  • MitigationFirmware 01.00.00 <= 01.08.00 installed on UR20-FBC-EIPweidmueller_psirt

    Weidmueller strongly recommends applying the following external protective measures: Restrict network access to the EtherNet/IP network containing affected products. If remote access is required, use secure methods such as virtual private networks (VPNs).

  • MitigationEtherNet/IP Adapter DLL Kit (EIPA)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • MitigationEtherNet/IP Adapter Development Kit (EADK)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • MitigationEtherNet/IP Scanner DLL Kit (EIPS)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • MitigationEtherNet/IP Scanner Development Kit (EDKS)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • Mitigation1732E-12X4M12P5QCDR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-12X4M12QCDR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12P5QCR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12P5QCWR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12QCR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12QCWR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12R Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-8X8M12DR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-IB16M12DR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-IB16M12R Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-OB16M12DR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-OB16M12R Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1734-AENT/1734-AENTR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1734-AENT/1734-AENTR Series Ccisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1738-AENT/ 1738-AENTR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1794-AENTR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1799ER-IQ10XOQ10 Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5–9.8

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6
v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · CISA US
v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USexploitability 3.9 · impact 5.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Weidmüller PSIRT DE
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USCWE-787USCWE-787USCWE-787US
05

affected products (52)

Products and version ranges known to be affected.

showing 20 of 52
06

advisories (3)

Vendor and ecosystem advisories describing this.

  • VDE-2021-004Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write2022-06-21csaf · weidmueller_psirtDE

    A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition of the affected products. The indicated firmware versions are only used on products of hardware version 01.xx.xx.

  • ICSA-22-174-04Pyramid Solutions EtherNet/IP Adapter Development Kit2022-06-23icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow an attacker with access to the EtherNet/IP network to send a specially crafted packet that may result in a denial-of-service condition.

  • ICSA-23-236-06Rockwell Automation Select Distributed I/O Communication Modules2023-08-24icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.

07

also known as (5)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducisa_csaf_otweidmueller_psirtNVDCVE.orgMITRE
published 2022-07-12modified 2026-06-17
09

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan