# CVE-2026-10577: Rockwell Automation 1715-AENTR missing authentication on debug port

Source: https://junglewise.ai/threats/cve-2026-10577-rockwell-automation-1715-aentr-missing-authentication-on-debug  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-14. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-10577 · Severity: info · CVSS 10 · Published 2026-07-14

Rockwell Automation 1715-AENTR EtherNet/IP Adapters, which are used to manage redundant industrial communications, contain a security flaw that exposes a debug port to the network without requiring a password. An attacker could use this access to take full control of the device, allowing them to stop industrial tasks, delete files, or manipulate physical I/O states. This could lead to significant operational downtime, equipment damage, or safety risks in industrial environments.

Vendors: [Rockwell Automation](https://junglewise.ai/threats/vendors/rockwell-automation).

## Quick answers

**Is CVE-2026-10577 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10577 being exploited in the wild.

**How severe is CVE-2026-10577?** Informational severity, with a CVSS score of 10, published 14 July 2026.

**Which products and versions are affected?** Rockwell Automation 1715-AENTR EtherNet/IP Adapter 3.003 and prior.

**Is there a fix for CVE-2026-10577?** A patch was published on 2026-07-14: Firmware version 3.011 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-10577 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-10577?** Check whether you run Rockwell Automation 1715-AENTR EtherNet/IP Adapter at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as Missing Authentication for Critical Function (CWE-306) exists in the 1715-AENTR EtherNet/IP Adapter firmware. The device exposes a network-accessible debug port that fails to enforce privilege controls or authentication. A remote, unauthenticated attacker can connect to this port to access a command-line interface (CLI) with high-level permissions. Successful exploitation allows the attacker to read/delete files, terminate system tasks, modify memory, and change I/O states. The issue is resolved in firmware version 3.011.

## Affected products

- Rockwell Automation 1715-AENTR EtherNet/IP Adapter 3.003 and prior

## Timeline

- 2026-07-14: advisory: Initial release of SD1785 by Rockwell Automation
- 2026-07-14: patched: Firmware version 3.011 released to address the issue

## References

- [https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1785.html](https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1785.html)