CVE-2023-3596

Katalog CVE

CVSS 7.5 · High EPSS 3,7%

Kerentanan Out-of-bounds Write pada rockwellautomation 1756-en4tr firmware, rockwellautomation 1756-en4trk firmware +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Rincian

Terbit di NVD

12 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,7% peluang dieksploitasi; lebih tinggi dari 89,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010 permissions required · advisory vendor