CVE-2025-8007 HIGH

CVE-2025-8007: Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability

Vendor Rockwell Automation
Product 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT
Weakness CWE-20 · Input validation
Published September 9, 2025
Last update September 9, 2025
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault. This condition may lead to unexpected system crashes and loss of device availability.

Key dates

02Disclosure timeline

September 9, 2025 CVE published
September 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-31672 Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names CVE-2019-15262 Cisco Wireless LAN Controller Secure Shell Denial of Service Vulnerability CVE-2021-29507 dlt-daemon could crash if there is special character in dlt.conf CVE-2026-25514 FacturaScripts has SQL Injection vulnerability in Autocomplete Actions CVE-2025-30649 Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.