Advisories › Rockwell Automation › ICSA-26-202-09
Rockwell Automation 1734 POINT I/O (Update A): 1 CVE, Low 3.7
Summary
CISA reports 1 vulnerability in Rockwell Automation 1734 POINT I/O. Weakness type: Allocation of Resources Without Limits or Throttling. Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product. Highest CVSS v3 score: 3.7 (Low), exploitable over the network.
What to do: Plan: Customers using the affected software, who are not able to upgrade to one of the corrected versions, should use Rockwell Automation's security best practices…
Why this matters for oil & gas: Rockwell Automation (ControlLogix, FactoryTalk, PlantPAx) is common on facilities and compressor stations.
At a glance
- Vendor
- Rockwell Automation
- Products
- 1734 POINT I/O
- CVEs
- CVE-2026-10573
- Highest CVSS v3
- 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Critical Manufacturing
- Deployed
- Worldwide
- Vendor HQ
- United States
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-10573 | Allocation of Resources Without Limits or Throttling | 3.7 | – | No | A denial-of-service security issue exists in 1734 POINT I/O module. The security issue stems from improper handling of crafted CIP messages, which can cause the module to enter a faulted state. When there is only a single IO module is attached, a restart is required to recover. When more than one I/O module is physically attached, the connection automatically recovers within ~5– 7 seconds. |
Affected products (1)
- Rockwell Automation 1734 POINT I/O: 3.023
Vendor fixes and mitigations (from advisory)
- Mitigation: Rockwell Automation recommends users are to migrate to 5034-OB8.
- Mitigation: Customers using the affected software, who are not able to upgrade to one of the corrected versions, should use Rockwell Automation's security best practices (https://support.rockwellautomation.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight). link
- Mitigation: For more information, see Rockwell Automation Security Advisories: https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html. link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.