CVE-2026-12655

HighCVSS 8.8

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.

Risk Assessment

An attacker could gain administrative control over the device and alter its configuration, potentially disrupting industrial system operations. The risk is high if the device is network-accessible.

Recommendation

Restrict network access to the device and change default passwords. Update the device firmware if the vendor has released a fix.

Other vulnerabilities in 1732E ArmorBlock I/O

CVE-2026-12656High
A denial-of-service security issue exists in the affected product and version. The issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS