CVEvulnerability
CVE-2023-2262
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-09-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-121, CWE-787
Description
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Affected configurations
• rockwellautomation 1756-en2t series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2t series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2t series c firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2t series d firmware (<= 11.002)
• rockwellautomation 1756-en2tk series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2tk series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2tk series c firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2txt series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2txt series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2txt series c firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2txt series d firmware (<= 11.002)
• rockwellautomation 1756-en2tp series a firmware (<= 11.002)
• rockwellautomation 1756-en2tpk series a firmware (<= 11.002)
• rockwellautomation 1756-en2tr series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2tr series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2tr series c firmware (<= 11.002)
• rockwellautomation 1756-en2trk series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2trk series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2trk series c firmware (<= 11.002)
• rockwellautomation 1756-en2trxt series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2trxt series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2trxt series c firmware (<= 11.002)
• rockwellautomation 1756-en2f series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2f series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2f series c firmware (<= 11.002)
• rockwellautomation 1756-en2fk series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2fk series b firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en2fk series c firmware (<= 11.002)
• rockwellautomation 1756-en3tr series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en3tr series b firmware (<= 11.003)
• rockwellautomation 1756-en3trk series a firmware (>= 5.008 <= 5.028)
• rockwellautomation 1756-en3trk series b firmware (<= 11.002)
• rockwellautomation 1756-en2tpxt series a firmware (<= 11.002)
Related
References
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140786 Permissions Required, Vendor Advisory
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140786 Permissions Required, Vendor Advisory