Rockwell Automation 1734 POINT I/O CIP Malformed Input DoS via CVE-2026-10573

Denial of Service in 1734 POINT I/O Due to Malformed Input in CIP Objects Vulnerability Overview CVE ID: CVE-2026-10573 CVSS 3.1 Base Score: 7.5/10 CVSS 4.0 Base Score: 8.7/10 CWE: CWE-770: Allocation of Resources Without Limits or Throttling Impact: A denial of service security issue exists in the 1734 POINT I/O™ modules. This issue stems from the improper handling of forged CIP messages, which may cause the module to enter a fault state. A reboot is required to restore functionality. Affected Products Affected Products: 1734 POINT I/O™ Affected Firmware Versions: 3.023 Remediated Firmware Versions: None (Migration to 5034-OB8 is recommended) Affected Catalog Numbers: 1734-OB8 Remediation Known Exploited Vulnerability (KEV): No Workaround: Yes Recommendation: Users should migrate to version 5034-OB8. Additional Information Publication Date: July 14, 2026 Last Updated: July 14, 2026 Revision Number: 1.0 Initial Release: July 14, 2026 Support For any questions regarding this security issue, contact TechConnect for assistance. More information can be found at Contact Us For more information regarding this disclosure, contact PSIRT. Email: rasecure@ra.rockwell.com Legal Disclaimer ROCKWELL AUTOMATION does not guarantee the completeness, timeliness, or accuracy of the data on this website. In no event shall ROCKWELL AUTOMATION be liable for any direct, indirect, incidental, consequential, or special damages, even if advised of the possibility of such damages. Some jurisdictions do not allow the exclusion of implied warranties, so this disclaimer may not apply to you.

Goal Reached Thanks to every supporter — we hit 100%!

Rockwell Automation 1734 POINT I/O CIP Malformed Input DoS via CVE-2026-10573