CVE-2025-8007
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-09-09
Last updated on: 2025-09-17
Assigner: Rockwell Automation
Description
Description
A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rockwellautomation | 1756-en2tr_series_a_firmware | to 7.001 (exc) |
| rockwellautomation | 1756-en2tr_series_a | * |
| rockwellautomation | 1756-en2tr_series_b_firmware | to 7.001 (exc) |
| rockwellautomation | 1756-en2tr_series_b | * |
| rockwellautomation | 1756-en2tr_series_c_firmware | to 7.001 (exc) |
| rockwellautomation | 1756-en2tr_series_c | * |
| rockwellautomation | 1756-en4tr_firmware | to 7.001 (exc) |
| rockwellautomation | 1756-en4tr | * |
| rockwellautomation | 1756-en4trxt_firmware | to 7.001 (exc) |
| rockwellautomation | 1756-en4trxt | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo | |
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |