Vulnerability · Published Jul 12, 2023 · Assigned by Rockwell
CVE-2023-3595Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution
Critical 9.8
In plain English
A critical-severity out-of-bounds write in 1756-EN2TPXT Series A from Rockwell Auotmation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.5% (higher than 93% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)5.5%top 7.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.