Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-04 | 1 | Active Exploitation1 |
| 2026-09-08 | 1 | Disclosure1 |
Rockwell Automation社の1756-ENBTモジュールという，ControlLogixシステムで使用されるEtherNet/IP通信モジュールに未認証の細工したCIPパケットを送るだけでDoSになる脆弱性が見つかりました（CVE-2025-10478） 世界中の重要製造業、食料・農業、輸送システム、水・廃水処理事業者に影響があります https://t.co/0pfxoTbOBX
Post summary
The tweet announces the discovery of CVE‑2025‑10478, a DoS flaw in Rockwell Automation’s 1756‑ENBT EtherNet/IP module triggered by unauthenticated CIP packets, impacting major industrial sectors worldwide.
TRC analysis shows attackers exploiting CVE-2025-10478 in Rockwell Automation ICS modules by sending crafted CIP packets to crash critical infrastructure systems. The vulnerability requires manual restart to restore operations, potentially halting manufacturing and water treatment facilities. Runtime segmentation helps contain such OT network compromises. #ICS #CriticalInfrastructure 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/rockwell-automation-1756-enbt-cve-2025-10478-dos-vulnerability
Post summary
Attackers are actively exploiting CVE-2025-10478 by sending crafted CIP packets to Rockwell Automation modules, causing a denial-of-service that disrupts manufacturing and water treatment facilities; a manual restart is required to restore operations.