Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-3595

Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.

Published

2023-07-12T13:15:09.880

Last Modified

2024-11-21T08:17:37.710

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-787
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System rockwellautomation 1756-en2f_series_a_firmware - Yes
Hardware rockwellautomation 1756-en2f_series_a - No
Operating System rockwellautomation 1756-en2f_series_b_firmware - Yes
Hardware rockwellautomation 1756-en2f_series_b - No
Operating System rockwellautomation 1756-en2f_series_c_firmware - Yes
Hardware rockwellautomation 1756-en2f_series_c - No
Operating System rockwellautomation 1756-en2t_series_a_firmware - Yes
Hardware rockwellautomation 1756-en2t_series_a - No
Operating System rockwellautomation 1756-en2t_series_b_firmware - Yes
Hardware rockwellautomation 1756-en2t_series_b - No
Operating System rockwellautomation 1756-en2t_series_c_firmware - Yes
Hardware rockwellautomation 1756-en2t_series_c - No
Operating System rockwellautomation 1756-en2t_series_d_firmware - Yes
Hardware rockwellautomation 1756-en2t_series_d - No
Operating System rockwellautomation 1756-en2tr_series_a_firmware - Yes
Hardware rockwellautomation 1756-en2tr_series_a - No
Operating System rockwellautomation 1756-en2tr_series_b_firmware - Yes
Hardware rockwellautomation 1756-en2tr_series_b - No
Operating System rockwellautomation 1756-en2tr_series_c_firmware - Yes
Hardware rockwellautomation 1756-en2tr_series_c - No
Operating System rockwellautomation 1756-en3tr_series_a_firmware - Yes
Hardware rockwellautomation 1756-en3tr_series_a - No
Operating System rockwellautomation 1756-en3tr_series_b_firmware - Yes
Hardware rockwellautomation 1756-en3tr_series_b - No
References