Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-3596

Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation 1756-EN4TR Series A

Default version status: unaffected

  • <=5.001affected

Rockwell Automation 1756-EN4TRK Series A

Default version status: unaffected

  • <=5.001affected

Rockwell Automation 1756-EN4TRXT Series A

Default version status: unaffected

  • <=5.001affected

References