CVEvulnerability

CVE-2023-2262

9.8 CRITICAL Published 2023-09-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121, CWE-787

Description

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

Affected configurations

• rockwellautomation 1756-en2t series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2t series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2t series c firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2t series d firmware (<= 11.002) • rockwellautomation 1756-en2tk series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2tk series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2tk series c firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2txt series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2txt series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2txt series c firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2txt series d firmware (<= 11.002) • rockwellautomation 1756-en2tp series a firmware (<= 11.002) • rockwellautomation 1756-en2tpk series a firmware (<= 11.002) • rockwellautomation 1756-en2tr series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2tr series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2tr series c firmware (<= 11.002) • rockwellautomation 1756-en2trk series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2trk series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2trk series c firmware (<= 11.002) • rockwellautomation 1756-en2trxt series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2trxt series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2trxt series c firmware (<= 11.002) • rockwellautomation 1756-en2f series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2f series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2f series c firmware (<= 11.002) • rockwellautomation 1756-en2fk series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2fk series b firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en2fk series c firmware (<= 11.002) • rockwellautomation 1756-en3tr series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en3tr series b firmware (<= 11.003) • rockwellautomation 1756-en3trk series a firmware (>= 5.008 <= 5.028) • rockwellautomation 1756-en3trk series b firmware (<= 11.002) • rockwellautomation 1756-en2tpxt series a firmware (<= 11.002)

Related

Weakness · CWE (2)

  • CWE-121 Stack-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References