critical9.8
CVE-2023-2262
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices.
Impact
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | 1756-En2t Series A Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2t Series B Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2t Series C Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2t Series D Firmware | through 11.002 |
| Rockwellautomation | 1756-En2tk Series A Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2tk Series B Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2tk Series C Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2txt Series A Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2txt Series B Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2txt Series C Firmware | from 5.008 through 5.028 |
| Rockwellautomation | 1756-En2txt Series D Firmware | through 11.002 |
| Rockwellautomation | 1756-En2tp Series A Firmware | through 11.002 |