CVE-2023-2262
Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Rockwell Automation 1756-EN2T Series A, B, C
<=5.008 & 5.028
- Rockwell Automation 1756-EN2T Series D
through 11.002
- Rockwell Automation 1756-EN2TK Series A, B, C
<=5.008 & 5.028
- Rockwell Automation 1756-EN2TXT Series A, B, C
<=5.008 & 5.028
- Rockwell Automation 1756-EN2TXT Series D
through 11.002
- Rockwell Automation 1756-EN2TP Series A
through 11.002
- Rockwell Automation 1756-EN2TPK Series A
through 11.002
- Rockwell Auotmation 1756-EN2TPXT Series A
through 11.002
- Rockwell Automation 1756-EN2TR Series A, B
<=5.008 & 5.028
- Rockwell Automation 1756-EN2TR Series C
through 11.002
- Rockwell Automation 1756-EN2TRK Series A, B
<=5.008 & 5.028
- Rockwell Automation 1756-EN2TRK Series C
through 11.002
- Rockwell Automation 1756-EN2TRXT Series A, B
<=5.008 & 5.028
- Rockwell Automation 1756-EN2TRXT Series C
through 11.002
- Rockwell Automation 1756-EN2F Series A, B
<=5.008 & 5.028
- Rockwell Automation 1756-EN2F Series C
through 11.002
- Rockwell Automation 1756-EN2FK Series A, B
<=5.008 & 5.028
- Rockwell Automation 1756-EN2FK Series C
through 11.002
- Rockwell Automation 1756-EN3TR Series A
<=5.008 & 5.028
- Rockwell Automation 1756-EN3TR Series B
through 11.003
- Rockwell Automation 1756-EN3TRK Series A
<=5.008 & 5.028
- Rockwell Automation 1756-EN3TRK Series B
through 11.002