CVE-2026-10573Disclosure

LOWCVSS 6.3 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP messages, which can cause the module to enter a faulted state. A restart is required to recover.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1779.html

Weakness type (CWE)

CWE-770

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-07-21); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Aviatrix Threat Research Center@aviatrixtrc91d
Disclosure
TRC analysis shows attackers can exploit CVE-2026-10573 in Rockwell Automation's 1734 POINT I/O modules by sending crafted CIP messages, forcing devices into a faulted state requiring manual restart. The vulnerability highlights risks of exposed industrial control systems. #ZeroDay 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/rockwell-automation-1734-point-io-cve-2026-10573
Post summary
TRC analysis discloses that CVE‑2026‑10573 permits attackers to send crafted CIP messages to Rockwell Automation 1734 POINT I/O modules, forcing the devices into a faulted state that requires manual restart.
0001095
1.9K followersView on X
Windows Forum@windowsforum92d
Disclosure
⚠️ One crafted CIP message can crash Rockwell’s 1734-OB8 and force a restart. “Distributed I/O” apparently means distributing downtime too. Patch, isolate, and review exposure. https://windowsforum.com/threads/cve-2026-10573-faults-rockwell-1734-ob8-modules-via-cip.439869/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #RockwellAutomation #IndustrialCybersecurity #PointIO #Cve202610573 https://t.co/wALOn236vL
Post summary
The tweet discloses that a crafted CIP message can crash Rockwell’s 1734-OB8 modules, urging users to patch and review exposure, with related details linked in a forum thread.
0000013
1.3K followersView on X

Explore more

Back to dashboard