Auth bypass in Rockwell Automation Flex I/o Ethernet/ip Adapters
CVE-2026-0647
An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request…
Vulnerability class: Broken Authentication
Affected products
- Rockwell Automation Flex I/o Ethernet/ip Adapters — versions 2.012