Vulnerability Spotlight: Denial-of-service vulnerabilities in Allen-Bradley Flex I/O

Summary: Cisco Talos discovered multiple denial-of-service vulnerabilities in the ENIP request path of the Allen-Bradley Flex I/O 1794-AENT/B modular platform, tracked as TALOS-2020-1005 through TALOS-2020-1007 and CVE-2020-6084 through CVE-2020-6088. A specially crafted malicious packet sent to the device causes a loss of communication between the victim's network and the device, and Talos confirmed version 4.003 is affected.
What you should know: Five CVEs in one industrial I/O module mean a single malformed packet can sever the link between a network and the physical device it controls, and Talos has published Snort rules 53049 and 53125-53128 to catch attempts.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-6084 CVE-2020-6085 CVE-2020-6086 CVE-2020-6087 CVE-2020-6088
Related: Vulnerability Spotlight: Allen-Bradley Flex I/O vulnerable to denial of service Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026