🟠 《高危安全漏洞：CVE-2026-9653》

CVSS 评分: 高危（8.7）　　状态: Awaiting Analysis　　发布时间: 2026-07-14

漏洞描述

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.

🔍 技术细节

字段 值
CVE ID CVE-2026-9653
CVSS 评分 8.7 🟠
严重程度 高危
CVSS 向量 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE 分类 CWE-354
发布时间 2026-07-14
最后更新 2026-07-14
状态 Awaiting Analysis
数据来源 PSIRT@rockwellautomation.com

🔗 参考链接