Description
A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.
Published: 2026-10-13
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

An improper handling of network storm traffic by the 1732E ArmorBlock® I/O device can lead to a denial‑of‑service condition. The attack causes the device to interrupt communication, drop open TCP and UDP ports, and generate device faults. To recover, a power cycle is required, indicating that the device cannot reset these faults autonomously. This issue is classified as a high‑severity flaw with a CVSS score of 8.7 and is listed under CWE‑770 for unbounded resource consumption.

Affected Systems

Rockwell Automation 1732E ArmorBlock® I/O devices running firmware versions prior to 3.013 are affected. The exact version range is not specified, but the advisory recommends any firmware older than 3.013 to be updated.

Risk and Exploitability

The vulnerability carries a high CVSS score, reflecting significant potential impact on availability. No EPSS score is available, so the probability of exploitation cannot be quantified; however, the issue appears to be exploitable through normal network traffic, implying that an attacker need only generate a network storm to trigger it. The flaw is not listed in CISA’s KEV catalog, so there is no evidence of a widespread exploitation campaign yet, but the high impact and lack of a failsafe in the device suggest a high urgency to remediate.

Generated by OpenCVE AI on October 13, 2026 at 18:49 UTC.

Remediation

Vendor Solution

3.013 or later


OpenCVE Recommended Actions

  • Upgrade the 1732E ArmorBlock® I/O firmware to version 3.013 or later as advised by Rockwell Automation
  • If the firmware cannot be upgraded immediately, isolate the device behind a network segmentation boundary or firewall to limit exposure to high‑volume traffic
  • Configure network traffic shaping or rate‑limiting controls to mitigate accidental storm effects

Generated by OpenCVE AI on October 13, 2026 at 18:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 13 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Description A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.
Title 1732E ArmorBlock® - Multiple Vulnerabilities
Weaknesses CWE-770
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Rockwell

Published:

Updated: 2026-10-13T15:49:47.082Z

Reserved: 2026-06-18T18:49:04.257Z

Link: CVE-2026-12656

cve-icon Vulnrichment

Updated: 2026-10-13T15:40:52.140Z

cve-icon NVD

Status : Received

Published: 2026-10-13T15:17:43.967

Modified: 2026-10-13T16:17:20.333

Link: CVE-2026-12656

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T19:00:06Z

Weaknesses
  • CWE-770

    Allocation of Resources Without Limits or Throttling