CVE-2025-8007
Medium
Description
A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.
SeverityMedium
CVSS6.5
Exploit probability18. percentile0.3%
ProductRockwellautomation 1756-en2tr Series A Firmware
PublishedSep 9, 2025
First seenSep 9, 2025
Weakness typeCWE-20Improper input validation
How to fix
Update
- rockwellautomation 1756-en2tr_series_a_firmware7.001 or later
- rockwellautomation 1756-en2tr_series_b_firmware7.001 or later
- rockwellautomation 1756-en2tr_series_c_firmware7.001 or later
- rockwellautomation 1756-en4tr_firmware7.001 or later
- rockwellautomation 1756-en4trxt_firmware7.001 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1756-en2tr_series_a_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en2tr_series_b_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en2tr_series_c_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en4tr_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en4trxt_firmware | v < 7.001 | 7.001 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.