Vulnerability · Published Sep 20, 2023 · Assigned by Rockwell
CVE-2023-2262Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow
Critical 9.8
In plain English
A critical-severity stack buffer overflow in 1756-EN2TPXT Series A from Rockwell Auotmation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.3%top 29.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.