Vulnerability Spotlight: Allen-Bradley Flex I/O vulnerable to denial of service

Summary: Cisco Talos discovered a denial-of-service vulnerability in the Rockwell Automation Allen-Bradley Flex I/O 1794-AENT/B, tracked as TALOS-2020-1008 and CVE-2020-6088, in which a specially crafted ENIP request path network segment packet causes a loss of communications with the device. Talos confirmed the flaw affects version 4.003 and worked with Rockwell Automation under its coordinated disclosure policy to resolve the issue and make an update available.
What's compelling: The device is industrial input/output gear reached over Ethernet/IP and HTTP, so a single malicious packet can cut communications with it - and Talos notes its Snort rule 53126 may change as more vulnerability information emerges, leaving detection coverage a moving target.

Read the original at Cisco Talos ↗

Topics: Endpoint & Network Security
Mentions: CVE-2020-6088
Related: Vulnerability Spotlight: Denial-of-service vulnerabilities in Allen-Bradley Flex I/O Cyber Risks ·
Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026
Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026