Is CVE-2026-10577 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10577 being exploited in the wild.

How severe is CVE-2026-10577?

Informational severity, with a CVSS score of 10, published 14 July 2026.

Which products and versions are affected?

Rockwell Automation 1715-AENTR EtherNet/IP Adapter 3.003 and prior.

Is there a fix for CVE-2026-10577?

A patch was published on 2026-07-14: Firmware version 3.011 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-10577 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-10577?

Check whether you run Rockwell Automation 1715-AENTR EtherNet/IP Adapter at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10577: Rockwell Automation 1715-AENTR missing authentication on debug port

CVE-2026-10577 · Severity: info · CVSS 10 · Published 2026-07-14

Rockwell Automation 1715-AENTR EtherNet/IP Adapters, which are used to manage redundant industrial communications, contain a security flaw that exposes a debug port to the network without requiring a password. An attacker could use this access to take full control of the device, allowing them to stop industrial tasks, delete files, or manipulate physical I/O states. This could lead to significant operational downtime, equipment damage, or safety risks in industrial environments.

Vendors: Rockwell Automation.

Quick answers

Is CVE-2026-10577 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10577 being exploited in the wild.
How severe is CVE-2026-10577?: Informational severity, with a CVSS score of 10, published 14 July 2026.
Which products and versions are affected?: Rockwell Automation 1715-AENTR EtherNet/IP Adapter 3.003 and prior.
Is there a fix for CVE-2026-10577?: A patch was published on 2026-07-14: Firmware version 3.011 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-10577 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-10577?: Check whether you run Rockwell Automation 1715-AENTR EtherNet/IP Adapter at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability classified as Missing Authentication for Critical Function (CWE-306) exists in the 1715-AENTR EtherNet/IP Adapter firmware. The device exposes a network-accessible debug port that fails to enforce privilege controls or authentication. A remote, unauthenticated attacker can connect to this port to access a command-line interface (CLI) with high-level permissions. Successful exploitation allows the attacker to read/delete files, terminate system tasks, modify memory, and change I/O states. The issue is resolved in firmware version 3.011.

Affected products

Rockwell Automation 1715-AENTR EtherNet/IP Adapter 3.003 and prior

Timeline

2026-07-14: advisory: Initial release of SD1785 by Rockwell Automation
2026-07-14: patched: Firmware version 3.011 released to address the issue

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1785.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.