1719-AENTR EUVD-2026-43693

Exploitation requires the attacker to be able to send UDP unicast traffic to the 1718-AENTR/1719-AENTR adapter and to sustain a network storm sufficient to overload it - the specific trigger named in the advisory is a UDP unicast network storm, not merely generic traffic. Per the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N), no authentication, no user interaction, and no special non-default configuration are needed against a network-reachable device. The primary limiting factor is network reachability: the adapter must be reachable from the attacker's position, so proper OT segmentation and firewalling substantially reduce exposure; there is no confidentiality or integrity impact, only availability, and recovery specifically requires a manual power cycle.

The provided CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) indicates a network-reachable, low-complexity attack requiring no authentication or interaction, with impact confined entirely to availability of the vulnerable system (VA:H; VC:N/VI:N/VA:H, no subsequent-system scope). This is a pure availability/DoS issue - no confidentiality or integrity loss. There is no EPSS score, KEV listing, or POC in the provided data, so exploitation is not confirmed to be automated or in-the-wild; however, network storm DoS conditions against ICS adapters are inherently trivial to reproduce once network access is obtained, and the need for a physical power cycle to recover amplifies operational impact in OT settings where uptime is critical. Net assessment: a genuine priority for exposed OT networks despite the absence of active-exploitation signals, because the low complexity and manual-recovery requirement offset the lack of confidentiality/integrity impact. Note: only a CVSS 4.0 vector was supplied - no CVSS 3.1 vector or EPSS was provided, so cross-framework probability comparison cannot be made.

An attacker with access to the OT network segment - for example via a compromised engineering workstation or an exposed/flat industrial network - directs a sustained stream of UDP unicast packets at a 1719-AENTR adapter. The adapter's resources are exhausted, it stops communicating with its Logix controller and distributed I/O, and operators must physically power-cycle the module to restore control, causing a process outage. No POC is identified in the provided data, but the low attack complexity means such a flood is straightforward to generate.