CVE-2026-12656

HighCVSS 8.7

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

A denial-of-service security issue exists in the affected product and version. The issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.

Risk Assessment

An attacker could trigger a network storm, causing device unavailability and communication interruptions. This may lead to disruptions in industrial system operations.

Recommendation

Apply network storm protection measures (e.g., storm control) on switches and segment the network. Update the device firmware if the vendor has released a fix.

Other vulnerabilities in 1732E ArmorBlock I/O

CVE-2026-12655High
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.

Original NVD description (English source)

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS