CVE-2023-2262

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

VendorProductVersions
Rockwell Automation1756-EN2T Series A, B, C<=5.008 & 5.028
Rockwell Automation1756-EN2T Series D<=11.002
Rockwell Automation1756-EN2TK Series A, B, C<=5.008 & 5.028
Rockwell Automation1756-EN2TXT Series A, B, C<=5.008 & 5.028
Rockwell Automation1756-EN2TXT Series D<=11.002
Rockwell Automation1756-EN2TP Series A<=11.002
Rockwell Automation1756-EN2TPK Series A<=11.002
Rockwell Auotmation1756-EN2TPXT Series A<=11.002
Rockwell Automation1756-EN2TR Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2TR Series C<=11.002
Rockwell Automation1756-EN2TRK Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2TRK Series C<=11.002
Rockwell Automation1756-EN2TRXT Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2TRXT Series C<=11.002
Rockwell Automation1756-EN2F Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2F Series C<=11.002
Rockwell Automation1756-EN2FK Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2FK Series C<=11.002
Rockwell Automation1756-EN3TR Series A<=5.008 & 5.028
Rockwell Automation1756-EN3TR Series B<=11.003
Rockwell Automation1756-EN3TRK Series A<=5.008 & 5.028
Rockwell Automation1756-EN3TRK Series B<=11.002
rockwellautomation1756-en2fk_series_c_firmware>= 5.008, <= 5.028; <= 11.0002

References

Timeline

Published
Sep 20, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-226207.5An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure viCVE-2023-226217.2Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the serveCVE-2023-226225.3WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the soCVE-2023-226247.5Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.CVE-2023-226267.5PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. (Depending on databaCVE-2023-226298.8An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. ACVE-2023-22637.5The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing.  The new ENIP connections cannot be establisCVE-2023-226304.3IzyBat Orange casiers before 20221102_1 allows SQL Injection via a getCasier.php?taille= URI.CVE-2023-226312.7PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.CVE-2023-226322.7PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.CVE-2023-226337.5An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and beCVE-2023-226357.8A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all
CVE-2023-2262: Critical severity, CVSS 9.8 | Vulnix