---
id: CVE-2026-12656
title: A denial-of-service security issue exists in the affected product and version
summary: >-
  A denial-of-service security issue exists in the affected product and version.
  The security issue stems from improper handling of network storm traffic,
  which can interrupt communication, cause device faults, and affect open TCP
  and UDP …
severity: high
cvss: 8.7
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-770
vendor: Rockwell Automation
product: 1732E ArmorBlock® I/O
affected:
  - 1732e_armorblock_i_o <= 3.012
published: '2026-10-13'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:56:15.773'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-12656'
references:
  - url: >-
      https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1801.html
    label: PSIRT@rockwellautomation.com
tags:
  - nvd
  - cve.org
epss: 0.00253
epssPercentile: 0.16666
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-13T14:52:40.707825Z'
cvssSource: cna
ingestedAt: '2026-10-13T15:33:40.076Z'
---

## Overview

A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.