CVE-2026-12655

{
  "etk_id": "ETK-2026-1476",
  "cve_id": "CVE-2026-12655",
  "display_id": "CVE-2026-12655",
  "ghsa_id": "GHSA-2cq9-96mg-hc99",
  "euvd_id": "EUVD-2026-98743",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated password change in 1732E ArmorBlock I/O",
  "summary": "1732E ArmorBlock I/O devices are affected by an authentication flaw in the web server password-change function. An unauthenticated attacker who can reach the device may reset the web server password and take over administrative access or alter device configuration.",
  "mitigation": "Restrict network access to the device web interface to trusted administrative hosts and isolated management networks. Monitor for unexpected password or configuration changes and consult the vendor advisory for supported remediation details.",
  "vendor": "Rockwell Automation",
  "product": "1732E ArmorBlock® I/O",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.012"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "1732E ArmorBlock® I/O",
      "purl": null
    }
  ],
  "cwes": [
    294
  ],
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": 0.0027,
  "epss_percentile": 0.1791,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 22.010098166666666,
  "t0_at": "2026-10-13T14:08:36.952000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-13T14:08:36.952000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-13T14:08:36.952000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12655"
    }
  }
}