CISA 2026-07-21

Rockwell Automation 1734 POINT I/O

CVE-2026-10573

Machine-generated analysis · WAYSCloud LLM

The 1734 POINT I/O module (v3.023) can be forced into a faulted state by crafted CIP messages, causing a denial-of-service.

Context

The advisory concerns the Rockwell Automation 1734 POINT I/O module, version 3.023. Improper handling of crafted CIP messages can cause the module to enter a faulted state, resulting in a denial-of-service that requires a restart to recover. The vulnerability is classified as CWE-770 (allocation of resources without limits or throttling) and carries a CVSS v3.1 base score of 7.5 (High).

Operator considerations

Check: Verify the firmware version installed on each 1734 POINT I/O device.
Patch: Upgrade affected units to the 5034-OB8 release or later as recommended by Rockwell Automation.
Isolate: Segment the I/O network to limit exposure to untrusted CIP traffic.
Log: Monitor for faulted-state events or abnormal CIP message patterns on the affected modules.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product.

The following versions of Rockwell Automation 1734 POINT I/O are affected:

1734 POINT I/O 3.023

Vendor

Equipment

Rockwell Automation

Rockwell Automation 1734 POINT I/O

Allocation of Resources Without Limits or Throttling

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location: United States

A denial-of-service security issue exists in 1734 POINT I/O module. The security issue stems from improper handling of crafted CIP messages, which can cause the module to enter a faulted state. A restart is required to recover.

Rockwell Automation 1734 POINT I/O

MitigationRockwell Automation recommends users are to migrate to 5034-OB8.

MitigationCustomers using the affected software, who are ...

Read the full advisory on CISA →