Impact
An improper handling of network storm traffic by the 1732E ArmorBlock® I/O device can lead to a denial‑of‑service condition. The attack causes the device to interrupt communication, drop open TCP and UDP ports, and generate device faults. To recover, a power cycle is required, indicating that the device cannot reset these faults autonomously. This issue is classified as a high‑severity flaw with a CVSS score of 8.7 and is listed under CWE‑770 for unbounded resource consumption.
Affected Systems
Rockwell Automation 1732E ArmorBlock® I/O devices running firmware versions prior to 3.013 are affected. The exact version range is not specified, but the advisory recommends any firmware older than 3.013 to be updated.
Risk and Exploitability
The vulnerability carries a high CVSS score, reflecting significant potential impact on availability. No EPSS score is available, so the probability of exploitation cannot be quantified; however, the issue appears to be exploitable through normal network traffic, implying that an attacker need only generate a network storm to trigger it. The flaw is not listed in CISA’s KEV catalog, so there is no evidence of a widespread exploitation campaign yet, but the high impact and lack of a failsafe in the device suggest a high urgency to remediate.
OpenCVE Enrichment