← Back

CVE-2023-3595

nvd nist
Published: Jul 12, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.

Affected (12)

Rockwellautomation
12 products
1756 En2f Series A Firmware
1756 En2f Series B Firmware
1756 En2f Series C Firmware
1756 En2t Series A Firmware
1756 En2t Series B Firmware
1756 En2t Series C Firmware
1756 En2t Series D Firmware
1756 En2tr Series A Firmware
1756 En2tr Series B Firmware
1756 En2tr Series C Firmware
1756 En3tr Series A Firmware
1756 En3tr Series B Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2f Series A Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2f Series A
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2f Series B Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2f Series B
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2f Series C Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2f Series C
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2t Series A Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2t Series A
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2t Series B Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2t Series B
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2t Series C Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2t Series C
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2t Series D Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2t Series D
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2tr Series A Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2tr Series A
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2tr Series B Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2tr Series B
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En2tr Series C Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En2tr Series C
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En3tr Series A Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En3tr Series A
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
1756 En3tr Series B Firmware
All versions
Running on/withPlatform Versions
Rockwellautomation
1756 En3tr Series B
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: PSIRT@rockwellautomation.com
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory

Timeline

No history available yet.