CVE-2023-3596

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
Rockwell Automation1756-EN4TR Series A<=5.001
Rockwell Automation1756-EN4TRK Series A<=5.001
Rockwell Automation1756-EN4TRXT Series A <=5.001
rockwellautomation1756-en4tr<= 5.001
rockwellautomation1756-en4trk<= 5.001
rockwellautomation1756-en4trxt<= 5.001

References

Timeline

Published
Jul 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-359607.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file canCVE-2023-359617.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file canCVE-2023-359627.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file canCVE-2023-359637.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file canCVE-2023-359647.8Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file canCVE-2023-359659.8Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteCVE-2023-359669.8Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteCVE-2023-359679.8Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speCVE-2023-359689.8Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speCVE-2023-359697.8Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115. CVE-2023-35975.0A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.authentication. This flCVE-2023-359707.8Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115.
CVE-2023-3596: High severity, CVSS 7.5 | Vulnix