Which versions of 1734 POINT I/O are affected by CVE-2026-10573?

Rockwell Automation 1734 POINT I/O modules contain a network-accessible vulnerability that allows remote attackers to force devices into a faulted state, disrupting I/O processing without requiring…

How to fix or mitigate CVE-2026-10573?

Within 24 hours, identify and inventory all 1734 POINT I/O modules in production and document their network exposure. Within 7 days, implement network segmentation to restrict CIP (Common Industrial Protocol) traffic to authorized systems and deploy monitoring for suspicious CIP activity targeting these devices. Within 30 days, coordinate with Rockwell Automation for patch availability and timelines, and deploy industrial firewall rules and intrusion detection signatures to block malformed CIP packets as interim protection.

1734 POINT I/O CVE-2026-10573

Q: What is the CVSS score of CVE-2026-10573?

CVE-2026-10573 has a CVSS 4.0 base score of 6.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-43694 MEDIUM

Allocation of Resources Without Limits or Throttling (CWE-770)

2026-07-14 Rockwell

GHSA-7jrm-8f72-vqwm

Denial Of Service 1734 Point I O Rockwell Automation

6.3

CVSS 4.0 · Vendor: Rockwell

Severity by source

Vendor (Rockwell) PRIMARY

6.3 HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Unauthenticated network CIP message (AV:N/AC:L/PR:N/UI:N) causes module fault with availability-only impact (A:H) and no confidentiality or integrity effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Rockwell).

CVSS VectorVendor: Rockwell

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Aug 27, 2026 - 17:22 NVD

HIGH MEDIUM

CVSS changed

Aug 27, 2026 - 17:22 NVD

8.7 (HIGH) 6.3 (MEDIUM)

Analysis Generated

Jul 14, 2026 - 15:35 vuln.today

CVE Published

Jul 14, 2026 - 14:54 cve.org

HIGH 8.7

DescriptionCVE.org

A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP messages, which can cause the module to enter a faulted state. A restart is required to recover.

AnalysisAI

Remote denial-of-service in Rockwell Automation's 1734 POINT I/O module allows unauthenticated network attackers to force the module into a faulted state by sending specially crafted CIP (Common Industrial Protocol) messages, halting I/O processing until a manual restart is performed. The CVSS 4.0 base score of 8.7 reflects a high availability impact against a network-reachable OT device with no privileges or user interaction required. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.

Technical ContextAI

The 1734 POINT I/O family is Rockwell/Allen-Bradley's modular distributed I/O system used in industrial automation, communicating over EtherNet/IP using the Common Industrial Protocol (CIP). The root cause is classified as CWE-770 (Allocation of Resources Without Limits or Throttling), indicating the module fails to properly bound or validate resources when parsing crafted CIP messages, driving the device into an unrecoverable faulted state. Because CIP/EtherNet/IP devices typically process messages without authentication in flat OT networks, a malformed request reaching the module's network interface is sufficient to disrupt its operation, and only a physical or commanded restart restores service.

RemediationAI

Consult Rockwell Automation advisory SD1779 (https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1779.html) for vendor-provided firmware updates and affected catalog numbers; no exact fix version is present in the available input data, so apply the patched firmware version named in that advisory once identified. As compensating controls where patching is not immediately feasible, restrict CIP/EtherNet/IP access to the 1734 POINT I/O module by segmenting it onto a dedicated OT/control network behind a firewall or ICS-aware gateway and permitting CIP traffic (typically TCP/UDP 44818 and related EtherNet/IP ports) only from trusted engineering workstations and controllers - the trade-off is that overly strict filtering can break legitimate controller-to-I/O communication, so allowlists must include all valid CIP endpoints. Additionally, disable or block any external/remote routes to the OT VLAN and monitor for malformed CIP traffic; note that these network controls reduce exposure but do not remediate the underlying resource-handling flaw.