CVE-2023-3595

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
Rockwell Automation1756-EN2T Series A, B, C<=5.008 & 5.028
Rockwell Automation1756-EN2T Series D<=11.003
Rockwell Automation1756-EN2TK Series A, B, C<=5.008 & 5.028
Rockwell Automation1756-EN2TXT Series A, B, C<=5.008 & 5.028
Rockwell Automation1756-EN2TXT Series D<=11.003
Rockwell Automation1756-EN2TP Series A<=11.003
Rockwell Automation1756-EN2TPK Series A<=11.003
Rockwell Auotmation1756-EN2TPXT Series A<=11.003
Rockwell Automation1756-EN2TR Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2TR Series C<=11.003
Rockwell Automation1756-EN2TRK Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2TRK Series C<=11.003
Rockwell Automation1756-EN2TRXT Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2TRXT Series C<=11.003
Rockwell Automation1756-EN2F Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2F Series C<=11.003
Rockwell Automation1756-EN2FK Series A, B<=5.008 & 5.028
Rockwell Automation1756-EN2FK Series C<=11.003
Rockwell Automation1756-EN3TR Series A<=5.008 & 5.028
Rockwell Automation1756-EN3TR Series B<=11.003
Rockwell Automation1756-EN3TRK Series A<=5.008 & 5.028
Rockwell Automation1756-EN3TRK Series B<=11.003

References

Timeline

Published
Jul 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-359507.8Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file CVE-2023-359517.8Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file CVE-2023-359527.8Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file CVE-2023-359537.8Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file CVE-2023-359557.8Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A speCVE-2023-359567.8Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A speCVE-2023-359577.8Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A speCVE-2023-359587.8Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A speCVE-2023-359597.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file canCVE-2023-35967.5Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to CVE-2023-359607.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file canCVE-2023-359617.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can
CVE-2023-3595: Critical severity, CVSS 9.8 | Vulnix