Description
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Rockwell Automation 1756-EN2T Series A, B, C
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2T Series D
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2TK Series A, B, C
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2TXT Series A, B, C
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2TXT Series D
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2TP Series A
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2TPK Series A
Default version status: unaffected
<=11.003affected
Rockwell Auotmation 1756-EN2TPXT Series A
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2TR Series A, B
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2TR Series C
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2TRK Series A, B
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2TRK Series C
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2TRXT Series A, B
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2TRXT Series C
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2F Series A, B
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2F Series C
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN2FK Series A, B
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN2FK Series C
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN3TR Series A
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN3TR Series B
Default version status: unaffected
<=11.003affected
Rockwell Automation 1756-EN3TRK Series A
Default version status: unaffected
<=5.008 & 5.028affected
Rockwell Automation 1756-EN3TRK Series B
Default version status: unaffected
<=11.003affected