CVE-2026-12655: 1732E ArmorBlock® - Multiple Vulnerabilities
Published Oct 13, 2026
·Updated
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.
Affected Software
1 affected component
Rockwell Automation 1732E ArmorBlock I/O
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
1732E ArmorBlock® I/Oto a version that resolves this vulnerability.Fixed in 3.013
Event History
Oct 13, 2026
CVE Published
via MITRE·02:08 PM
Data Sourced
via MITRE·02:08 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker does not need valid credentials. They must be able to interact with the affected device's webserver to change its password.
2
What could an attacker do after exploitation?
An attacker could take over an administrator account or make unauthorized changes to the device configuration.