Skip to content
OpenAdvisories
Medium ICSA-23-075-07 1 CVE

Rockwell Automation Modbus TCP AOI Server

Published Mar 31, 2023 · Updated Mar 31, 2023

Vendor: Rockwell Automation Product: Modbus TCP Server AOI

Summary

Successful exploitation of this vulnerability could allow an unauthorized user to read the connected device’s Modbus TCP Server AOI information.

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-0027

    Rockwell Automation Modbus TCP AOI Server Could Leak Sensitive Information

    Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unautho…

    Rockwell Automation Modbus TCP Server Add On Instructions ICS / OT

Revision history

  1. #1

    CSAF Creation Date

References