CVE-2025-9177: Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability
A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover and utilize the webpage.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Rockwell Automation 1715 EtherNet/IP Comms Moduleto a version that resolves this vulnerability.Fixed in 3.011 - Operational
Perform a power cycle to recover and utilize the webpage after a web server crash.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9177?
CVE-2025-9177 is classified as a denial-of-service vulnerability that can lead to a web server crash.
How do I fix CVE-2025-9177?
To mitigate CVE-2025-9177, limit the number of requests sent to the web server to prevent overload.
What products are affected by CVE-2025-9177?
CVE-2025-9177 affects the Rockwell Automation 1715 EtherNet/IP Comms Module.
What are the consequences of CVE-2025-9177?
The main consequence of CVE-2025-9177 is a potential crash of the web server, requiring a power cycle to recover.
Is communication affected by CVE-2025-9177?
No, CVE-2025-9177 does not impact I/O control or communication outside of the web server's functionality.