This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-0647 | BDVDB-2026-340648 Detail

Rockwell AutomationFLEX I/O EtherNet/IP Adapters

Description#

An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthorized access, account takeover, and loss of the device’s embedded web server’s availability.

Impact#

Per CVSS v4.0: confidentiality impact low, integrity impact high, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.