CVE-2026-10577
CriticalCVSS 10.0Summary
The 1715-AENTR EtherNet/IP Adapter exposes a debug port without proper privilege controls, allowing unauthenticated remote attackers to execute intrusive CLI commands. This can lead to reading or deleting files, stopping tasks, modifying memory, and changing I/O states.
Risk Assessment
The organization faces complete loss of device confidentiality, integrity, and availability, potentially disrupting production processes and causing financial losses.
Recommendation
Immediately block access to the debug port via network firewall and apply the vendor's firmware update if available.
Original NVD description (English source)
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.