This vulnerability involves improper validation of CIP Implicit Connection packets in Rockwell Automation 1756-EN2, 1756-EN3, and ENBT communication modules. An unauthenticated network attacker can exploit this flaw by sending specially crafted packets to cause a denial-of-service condition, temporarily disrupting device communications. The disruption is transient as device connections recover immediately after the attack ceases. The CVSS 4.0 base score is 8.7, reflecting a high severity due to network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No vendor advisory or patch information is currently available.

Successful exploitation results in denial of service by continuously disrupting device connections on the affected communication modules. The impact is temporary as connections recover immediately after the attack stops, but it can cause operational interruptions during the attack period.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, network-level protections such as filtering or segmentation to restrict access to the affected modules may reduce exposure.