CVE-2025-8008
Medium
Description
A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash.
SeverityMedium
CVSS6.5
Exploit probability—
ProductRockwellautomation 1756-en2tr Series A Firmware
PublishedSep 9, 2025
First seenSep 9, 2025
Weakness typeCWE-755CWE-755
How to fix
Update
- rockwellautomation 1756-en2tr_series_a_firmware7.001 or later
- rockwellautomation 1756-en2tr_series_b_firmware7.001 or later
- rockwellautomation 1756-en2tr_series_c_firmware7.001 or later
- rockwellautomation 1756-en4tr_firmware7.001 or later
- rockwellautomation 1756-en4trxt_firmware7.001 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1756-en2tr_series_a_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en2tr_series_b_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en2tr_series_c_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en4tr_firmware | v < 7.001 | 7.001 |
| rockwellautomation 1756-en4trxt_firmware | v < 7.001 | 7.001 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.