Description
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.
Published: 2026-10-13
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

3.013 or later

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Description A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.
Title 1732E ArmorBlock® - Multiple Vulnerabilities
Weaknesses CWE-294
References
Metrics cvssV4_0

{'score': 8.8, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Rockwell

Published:

Updated: 2026-10-15T19:14:57.983Z

Reserved: 2026-06-18T18:48:53.410Z

Link: CVE-2026-12655

cve-icon Vulnrichment

Updated: 2026-10-15T19:11:45.763Z

cve-icon NVD

Status : Received

Published: 2026-10-13T15:17:43.820

Modified: 2026-10-15T20:17:13.243

Link: CVE-2026-12655

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T18:15:17Z

Weaknesses
  • CWE-294

    Authentication Bypass by Capture-replay