9.8
Critical
CVE-2023-2262 A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices
Description
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 1756-EN2T Series A, B, C | Versions not published | |
| 1756-EN2T Series D 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2TK Series A, B, C | Versions not published | |
| 1756-EN2TXT Series A, B, C | Versions not published | |
| 1756-EN2TXT Series D 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2TP Series A 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2TPK Series A 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2TPXT Series A 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2TR Series A, B | Versions not published |
Show the 15 other branches Hide the 15 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| 1756-EN2TR Series C 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2TRK Series A, B | Versions not published | |
| 1756-EN2TRK Series C 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2TRXT Series A, B | Versions not published | |
| 1756-EN2TRXT Series C 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2F Series A, B | Versions not published | |
| 1756-EN2F Series C 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN2FK Series A, B | Versions not published | |
| 1756-EN2FK Series C 11.002 | earliest → 11.002 | No fix stated |
| 1756-EN3TR Series A | Versions not published | |
| 1756-EN3TR Series B 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN3TRK Series A | Versions not published | |
| 1756-EN3TRK Series B 11.002 | earliest → 11.002 | No fix stated |
| 1756-en2fk_series_c_firmware 11.0002 | earliest → 11.0002 | No fix stated |
| 1756-en2fk_series_c_firmware 5.008 | 5.008 → 5.028 | No fix stated |