CVE-2025-7353

Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

State: Published
Severity: 9.3 Critical
Published: Aug 14, 2025
Updated: Feb 26, 2026
Reserved: Jul 8, 2025

Description

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	Rockwell

Weaknesses

CWE-1188 Initialization of a Resource with an Insecure Default

Affected Products

Product	Versions
1756-EN2T/DRockwell Automation	Version 11.004 or belowAffected
1756-EN2F/CRockwell Automation	Version 11.004 or belowAffected
1756-EN2TR/CRockwell Automation	Version 11.004 or belowAffected
1756-EN3TR/BRockwell Automation	Version 11.004 or belowAffected
1756-EN2TP/ARockwell Automation	Version 11.004 or belowAffected

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1732.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.