Vulnerability · Published Jul 14, 2026 · Assigned by Rockwell
CVE-2026-105731734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object
Medium 6.3
In plain English
A medium-severity resource allocation without limits in 1734 POINT I/O from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 4.0)6.3Medium
Exploit odds (30 days)0.3%top 73.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP messages, which can cause the module to enter a faulted state. A restart is required to recover.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | 1734 POINT I/O | 3.023 |
Weakness: CWE-770 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N