CVE-2025-8008

MEDIUM

Rockwellautomation 1756-en2tr Series ... - Improper Exception Handling

Title source: rule
STIX 2.1

Description

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash.

References (1)

Scores

CVSS v3 6.5
EPSS 0.0003
EPSS Percentile 10.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-755
Status published
Products (5)
rockwellautomation/1756-en2tr_series_a_firmware < 7.001
rockwellautomation/1756-en2tr_series_b_firmware < 7.001
rockwellautomation/1756-en2tr_series_c_firmware < 7.001
rockwellautomation/1756-en4tr_firmware < 7.001
rockwellautomation/1756-en4trxt_firmware < 7.001
Published Sep 09, 2025
Tracked Since Feb 18, 2026