This release includes the following system features.
Digitally Signed
System Feature
System Feature Available As Of:
Firmware Revision 1.001
Catalog Number 1769-AENTR
The Module Info tab for the 1769-AENTR module has a Clear Faults button that you must use to clear 1769 backplane faults.
Any serious 1769 backplane fault (such as command retries expired or missing bus terminator) breaks all existing I/O connections. Once you correct the cause of the fault, you must reset the backplane via the Clear Faults button.
This release has the following known anomalies.
Vulnerabilities Can Be Exploited to Impact EtherNet/IP Network Activity
Corrected Anomaly with Firmware Revision 1.002
Known Anomaly First Identified as of Firmware Revision 1.001
Catalog Numbers 1769-AENTR
Threat actors can exploit vulnerabilities in a real-time operating system (RTOS) that the 1769-AENTR EtherNet/IP™ adapter uses and have a wide range of negative impacts on EtherNet/IP network activity between devices.
The threat actors' actions can range from disclosing incorrect packet information to executing arbitrary code on targeted devices.
For more detailed information on this anomaly, the following article on the Rockwell Automation® Knowledgebase:
VxWorks Vulnerabilities affect Programmable Automation Controllers, EtherNet/IP Communication Modules, I/O Modules, Kinetix® 6500 Servo Drive, High-Frequency RFID Interface Block’
You can access the Knowledgebase at: https://rockwellautomation.custhelp.com/
GoAhead Web Server Vulnerabilities – EtherNet/IP Communication Devices (1693483)
|
Product
|
First Known in Firmware Revision
|
Corrected in Firmware Revision
|
|
1747-AENTR
|
2.002
|
--
|
|
1769-AENTR
|
1.001
|
1.003 and later
|
|
1756-EN2T/D
|
10.006
|
11.002 and later
|
|
1756-EN2TR/C
|
10.007
|
11.002 and later
|
|
1756-EN2TSC/B (discontinued)
|
10.01
|
--
|
|
5069-AEN2TR (discontinued)
|
3.011
|
--
|
|
Product
|
First Known in Firmware Revision
|
Corrected in Firmware Revision
|
|
1747-AENTR
|
2.002
|
--
|
|
1769-AENTR
|
1.001
|
1.003 and later
|
|
1756-EN2F/C
|
11.001
|
11.002 and later
|
|
1756-EN2T/D
|
11.001
|
11.002 and later
|
|
1756-EN2TP
|
11.001
|
11.002 and later
|
|
1756-EN2TR/C
|
11.001
|
11.002 and later
|
|
1756-EN2TSC/B (discontinued)
|
10.01
|
--
|
|
5069-AEN2TR (discontinued)
|
3.011
|
--
|
|
1756-EN3TR/B
|
11.001
|
11.002 and later
|
For a full list of the potentially affected Rockwell Automation products and a description of the vulnerabilities and additional mitigations, see Knowledgebase Product Notice, CVE-2019-5096 and CVE 2019-5097 Vulnerabilities Impact Multiple Products.