CVE-2025-7353: Rockwell Automation 1756-EN2T/D, лоша конфигурация

Описание

Оригинално описание

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.

Засегнати продукти

• Rockwell Automation 1756-EN2T/D: Version 11.004 or below
• Rockwell Automation 1756-EN2F/C: Version 11.004 or below
• Rockwell Automation 1756-EN2TR/C: Version 11.004 or below
• Rockwell Automation 1756-EN3TR/B: Version 11.004 or below
• Rockwell Automation 1756-EN2TP/A: Version 11.004 or below

Вид слабост

• CWE-1188 Initialization of a Resource with an Insecure Default

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-7353
• https://nvd.nist.gov/vuln/detail/CVE-2025-7353
• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1732.html