CVE-2023-2262
Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow
- State
- Published
- Severity
- 9.8 Critical
- Published
- Sep 20, 2023
- Updated
- Sep 25, 2024
- Reserved
- Apr 24, 2023
Description
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Rockwell |
Weaknesses
- CWE-121 Stack-based Buffer Overflow
Affected Products
| Product | Versions |
|---|---|
1756-EN2T Series A, B, CRockwell Automation |
|
1756-EN2T Series DRockwell Automation |
|
1756-EN2TK Series A, B, CRockwell Automation |
|
1756-EN2TXT Series A, B, CRockwell Automation |
|
1756-EN2TXT Series DRockwell Automation |
|
1756-EN2TP Series ARockwell Automation |
|
1756-EN2TPK Series ARockwell Automation |
|
1756-EN2TPXT Series ARockwell Auotmation |
|
1756-EN2TR Series A, BRockwell Automation |
|
1756-EN2TR Series CRockwell Automation |
|
1756-EN2TRK Series A, BRockwell Automation |
|
1756-EN2TRK Series CRockwell Automation |
|
1756-EN2TRXT Series A, BRockwell Automation |
|
1756-EN2TRXT Series CRockwell Automation |
|
1756-EN2F Series A, BRockwell Automation |
|
1756-EN2F Series CRockwell Automation |
|
1756-EN2FK Series A, BRockwell Automation |
|
1756-EN2FK Series CRockwell Automation |
|
1756-EN3TR Series ARockwell Automation |
|
1756-EN3TR Series BRockwell Automation |
|
1756-EN3TRK Series ARockwell Automation |
|
1756-EN3TRK Series BRockwell Automation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.