CVE-2023-2262

rockwellautomation 1756-en2t series a firmware, rockwellautomation 1756-en2t series b firmware, rockwellautomation 1756-en2t series c firmware +30 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-2262

Katalog CVE

CVSS 9.8 · Critical EPSS 1,3%

Kerentanan Stack-based Buffer Overflow pada rockwellautomation 1756-en2t series a firmware, rockwellautomation 1756-en2t series b firmware +31 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

Rincian

Terbit di NVD
20 September 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write
EPSS (30 hari)
1,3% peluang dieksploitasi; lebih tinggi dari 69,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
rockwellautomation 1756-en2t series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2t series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2t series c firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2t series d firmware Semua versi hingga 11.002
rockwellautomation 1756-en2tk series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2tk series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2tk series c firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2txt series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2txt series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2txt series c firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2txt series d firmware Semua versi hingga 11.002
rockwellautomation 1756-en2tp series a firmware Semua versi hingga 11.002
rockwellautomation 1756-en2tpk series a firmware Semua versi hingga 11.002
rockwellautomation 1756-en2tr series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2tr series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2tr series c firmware Semua versi hingga 11.002
rockwellautomation 1756-en2trk series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2trk series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2trk series c firmware Semua versi hingga 11.002
rockwellautomation 1756-en2trxt series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2trxt series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2trxt series c firmware Semua versi hingga 11.002
rockwellautomation 1756-en2f series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2f series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2f series c firmware Semua versi hingga 11.002
rockwellautomation 1756-en2fk series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2fk series b firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en2fk series c firmware Semua versi hingga 11.002
rockwellautomation 1756-en3tr series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en3tr series b firmware Semua versi hingga 11.003
rockwellautomation 1756-en3trk series a firmware Versi 5.008 hingga 5.028
rockwellautomation 1756-en3trk series b firmware Semua versi hingga 11.002
rockwellautomation 1756-en2tpxt series a firmware Semua versi hingga 11.002

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.