Description
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | 1756-EN2T Series A, B, C | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2T Series D | <=11.002 | — |
| Rockwell Automation | 1756-EN2TK Series A, B, C | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2TXT Series A, B, C | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2TXT Series D | <=11.002 | — |
| Rockwell Automation | 1756-EN2TP Series A | <=11.002 | — |
| Rockwell Automation | 1756-EN2TPK Series A | <=11.002 | — |
| Rockwell Auotmation | 1756-EN2TPXT Series A | <=11.002 | — |
| Rockwell Automation | 1756-EN2TR Series A, B | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2TR Series C | <=11.002 | — |
| Rockwell Automation | 1756-EN2TRK Series A, B | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2TRK Series C | <=11.002 | — |
| Rockwell Automation | 1756-EN2TRXT Series A, B | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2TRXT Series C | <=11.002 | — |
| Rockwell Automation | 1756-EN2F Series A, B | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2F Series C | <=11.002 | — |
| Rockwell Automation | 1756-EN2FK Series A, B | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN2FK Series C | <=11.002 | — |
| Rockwell Automation | 1756-EN3TR Series A | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN3TR Series B | <=11.003 | — |
| Rockwell Automation | 1756-EN3TRK Series A | <=5.008 & 5.028 | — |
| Rockwell Automation | 1756-EN3TRK Series B | <=11.002 | — |
Advisories 1
- ICSA-23-264-04 Rockwell Automation Select Logix Communication Modules CISA ICS & IT advisories · Sep 21, 2023