CVE-2023-2262
Critical
Description
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
SeverityCritical
CVSS9.8
Exploit probability—
ProductRockwellautomation 1756-en2t Series A Firmware
PublishedSep 20, 2023
First seenSep 20, 2023
Weakness typeCWE-121CWE-121
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1756-en2t_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2t_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2t_series_c_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2t_series_d_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2tk_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2tk_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2tk_series_c_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2txt_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2txt_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2txt_series_c_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2txt_series_d_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2tp_series_a_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2tpk_series_a_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2tr_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2tr_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2tr_series_c_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2trk_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2trk_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2trk_series_c_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2trxt_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2trxt_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2trxt_series_c_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2f_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2f_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2f_series_c_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2fk_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2fk_series_b_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en2fk_series_c_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en3tr_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en3tr_series_b_firmware | v ≤ 11.003 | — |
| rockwellautomation 1756-en3trk_series_a_firmware | 5.008 ≤ v ≤ 5.028 | — |
| rockwellautomation 1756-en3trk_series_b_firmware | v ≤ 11.002 | — |
| rockwellautomation 1756-en2tpxt_series_a_firmware | v ≤ 11.002 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.