Skip to content
OpenAdvisories
High · 7.5 CVE-2023-3596 EUVD-2023-44246GHSA-xvq9-c88q-jf5x

Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service

Published Jul 12, 2023 · Updated Nov 7, 2024 · Assigned by Rockwell

Description

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Affected products

VendorProductAffectedFixed
Rockwell Automation 1756-EN4TR Series A <=5.001 —
Rockwell Automation 1756-EN4TRK Series A <=5.001 —
Rockwell Automation 1756-EN4TRXT Series A <=5.001 —

Advisories 1

References