9.8
Critical
CVE-2023-3595 Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication…
Description
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 1756-EN2T Series A, B, C | Versions not published | |
| 1756-EN2T Series D 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2TK Series A, B, C | Versions not published | |
| 1756-EN2TXT Series A, B, C | Versions not published | |
| 1756-EN2TXT Series D 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2TP Series A 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2TPK Series A 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2TPXT Series A 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2TR Series A, B | Versions not published |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| 1756-EN2TR Series C 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2TRK Series A, B | Versions not published | |
| 1756-EN2TRK Series C 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2TRXT Series A, B | Versions not published | |
| 1756-EN2TRXT Series C 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2F Series A, B | Versions not published | |
| 1756-EN2F Series C 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN2FK Series A, B | Versions not published | |
| 1756-EN2FK Series C 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN3TR Series A | Versions not published | |
| 1756-EN3TR Series B 11.003 | earliest → 11.003 | No fix stated |
| 1756-EN3TRK Series A | Versions not published | |
| 1756-EN3TRK Series B 11.003 | earliest → 11.003 | No fix stated |