Vulnerability · Published Oct 14, 2025 · Assigned by Rockwell
CVE-2025-9177Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability
High 7.7
In plain English
A high-severity resource allocation without limits in 1715-AENTR EtherNet/IP Adapter from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Official description
A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover and utilize the webpage.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | 1715-AENTR EtherNet/IP Adapter | Version 3.003 and prior |
Weakness: CWE-770 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H