CISA 2026-07-21

Rockwell Automation 1718-AENTR/1719-AENTR

CVE-2026-9140

Machine-generated analysis · WAYSCloud LLM

Rockwell Automation 1718/1719 Ex I/O version 3.011 is vulnerable to a denial-of-service condition caused by a UDP unicast network storm.

Context

The advisory concerns Rockwell Automation 1718-AENTR/1719-AENTR (1718/1719 Ex I/O) version 3.011. Improper handling of a UDP unicast network storm can overload the device, causing loss of communication and requiring a power cycle to recover. The issue is tracked as CVE-2026-9140 with a CVSS v3.1 base score of 7.5 (High).

Operator considerations

Check: verify installed version of Rockwell Automation 1718/1719 Ex I/O and identify any devices running version 3.011.
Patch: upgrade affected devices to 1718/1719 Ex I/O version 3.012 or later as recommended by the vendor.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product.

The following versions of Rockwell Automation 1718-AENTR/1719-AENTR are affected:

1718/ 1719 Ex I/O 3.011

Vendor

Equipment

Rockwell Automation

Rockwell Automation 1718-AENTR/1719-AENTR

Allocation of Resources Without Limits or Throttling

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location: United States

A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP unicast network storm, which causes the device to become overloaded and lose communication. A power cycle is required to recover.

Rockwell Automation 1718-AENTR/1719-AENTR

MitigationCustomers using the affected software, who are not able to upgrade to one of th...

Read the full advisory on CISA →