This vulnerability (CVE-2026-9140) involves resource allocation without limits or throttling (CWE-770) in Rockwell Automation 1718-AENTR/1719-AENTR devices. When subjected to a UDP unicast network storm, the affected device version 3.011 becomes overloaded, resulting in denial of service and loss of communication. The device must be power cycled to restore functionality. No official patch or remediation level has been provided by the vendor as of the publication date.

Successful exploitation causes a denial-of-service condition by overwhelming the device with UDP unicast traffic, leading to loss of communication. The device becomes unresponsive and requires a manual power cycle to recover, potentially disrupting industrial control processes relying on these devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider network-level controls to limit UDP unicast traffic storms targeting the device. Monitor for unusual network traffic patterns that could indicate an attempted exploitation.