Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-2262

Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation 1756-EN2T Series A, B, C

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2T Series D

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2TK Series A, B, C

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2TXT Series A, B, C

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2TXT Series D

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2TP Series A

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2TPK Series A

Default version status: unaffected

  • <=11.002affected

Rockwell Auotmation 1756-EN2TPXT Series A

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2TR Series A, B

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2TR Series C

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2TRK Series A, B

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2TRK Series C

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2TRXT Series A, B

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2TRXT Series C

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2F Series A, B

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2F Series C

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN2FK Series A, B

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN2FK Series C

Default version status: unaffected

  • <=11.002affected

Rockwell Automation 1756-EN3TR Series A

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN3TR Series B

Default version status: unaffected

  • <=11.003affected

Rockwell Automation 1756-EN3TRK Series A

Default version status: unaffected

  • <=5.008 & 5.028affected

Rockwell Automation 1756-EN3TRK Series B

Default version status: unaffected

  • <=11.002affected

References