CVE-2023-3595 - Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution

Back Back to CVE browser

CRITICAL

Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution

Published Jul 12, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 5.53%

Description

Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.

Affected products

Vendor Rockwell Auotmation Product 1756-EN2TPXT Series A Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2F Series A, B Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2F Series C Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2FK Series A, B Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2FK Series C Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2T Series A, B, C Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2T Series D Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2TK Series A, B, C Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2TP Series A Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2TPK Series A Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2TR Series A, B Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2TR Series C Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2TRK Series A, B Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2TRK Series C Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2TRXT Series A, B Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2TRXT Series C Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN2TXT Series A, B, C Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN2TXT Series D Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN3TR Series A Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN3TR Series B Default
unaffected
Affected
- ≤ 11.003
Vendor Rockwell Automation Product 1756-EN3TRK Series A Default
unaffected
Affected
- ≤ 5.008 & 5.028
Vendor Rockwell Automation Product 1756-EN3TRK Series B Default
unaffected
Affected
- ≤ 11.003

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Rockwell Auotmation	1756-EN2TPXT Series A	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2F Series A, B	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2F Series C	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2FK Series A, B	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2FK Series C	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2T Series A, B, C	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2T Series D	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2TK Series A, B, C	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2TP Series A	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2TPK Series A	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2TR Series A, B	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2TR Series C	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2TRK Series A, B	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2TRK Series C	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2TRXT Series A, B	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2TRXT Series C	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN2TXT Series A, B, C	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN2TXT Series D	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN3TR Series A	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN3TR Series B	unaffected	Affected ≤ 11.003
Rockwell Automation	1756-EN3TRK Series A	unaffected	Affected ≤ 5.008 & 5.028
Rockwell Automation	1756-EN3TRK Series B	unaffected	Affected ≤ 11.003

Remediation

Vendor solution

* Update firmware. Update EN2* ControlLogix communications modules to mitigated firmware. * Properly segment networks. Given a cyber actor would require network connectivity to the communication module to exploit the vulnerability, organizations should ensure ICS/SCADA networks are properly segmented within the process structure as well as from the Internet and other non-essential networks. * Implement detection signatures. Use appended Snort signatures to monitor and detect anomalous Common Industrial Protocol (CIP) packets to Rockwell Automation devices.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44245
Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010
Permissions RequiredVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44245		Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010		Permissions RequiredVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Rockwell

Published Jul 12, 2023

Updated Aug 2, 2024

Reserved Jul 10, 2023

Link CVE-2023-3595

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-3595

Red Hat

No data

ENISA EUVD

Assigner Rockwell

Published Jul 12, 2023

Updated Aug 2, 2024

Link EUVD-2023-44245

GitHub

No data