CVE-2023-2262

criticalPriorität · verfolgen · 39EPSS 0.013 · 70. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.29% (70th) EPSS
CVSS 9.8 · critical
Is it mine?
165 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behoben1756-EN2F Series Acisa_csaf_ot

    1756-EN2F Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2F Series Bcisa_csaf_ot

    1756-EN2F Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2F Series Ccisa_csaf_ot

    1756-EN2F Series C versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2FK Series Acisa_csaf_ot

    1756-EN2FK Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2FK Series Bcisa_csaf_ot

    1756-EN2FK Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2FK Series Ccisa_csaf_ot

    1756-EN2FK Series C versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2T Series Acisa_csaf_ot

    1756-EN2T Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2T Series Bcisa_csaf_ot

    1756-EN2T Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2T Series Ccisa_csaf_ot

    1756-EN2T Series C versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2T Series Dcisa_csaf_ot

    1756-EN2T Series D versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TK Series Acisa_csaf_ot

    1756-EN2TK Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TK Series Bcisa_csaf_ot

    1756-EN2TK Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TK Series Ccisa_csaf_ot

    1756-EN2TK Series C versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TK Series Dcisa_csaf_ot

    1756-EN2TK Series D versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TP Series Acisa_csaf_ot

    1756-EN2TP Series A versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TPK Series Acisa_csaf_ot

    1756-EN2TPK Series A versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TPXT Series Acisa_csaf_ot

    1756-EN2TPXT Series A versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TR Series Acisa_csaf_ot

    1756-EN2TR Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TR Series Bcisa_csaf_ot

    1756-EN2TR Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TR Series Ccisa_csaf_ot

    1756-EN2TR Series C versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TRK Series Acisa_csaf_ot

    1756-EN2TRK Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TRK Series Bcisa_csaf_ot

    1756-EN2TRK Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TRK Series Ccisa_csaf_ot

    1756-EN2TRK Series C versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TRXT Series Acisa_csaf_ot

    1756-EN2TRXT Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TRXT Series Bcisa_csaf_ot

    1756-EN2TRXT Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TRXT Series Ccisa_csaf_ot

    1756-EN2TRXT Series C versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN2TXT Series Acisa_csaf_ot

    1756-EN2TXT Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TXT Series Bcisa_csaf_ot

    1756-EN2TXT Series B versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TXT Series Ccisa_csaf_ot

    1756-EN2TXT Series C versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN2TXT Series Dcisa_csaf_ot

    1756-EN2TXT Series D versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN3TR Series Acisa_csaf_ot

    1756-EN3TR Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN3TR Series Bcisa_csaf_ot

    1756-EN3TR Series B versions 11.002 and prior: Update to 11.003 or later

  • Behoben1756-EN3TRK Series Acisa_csaf_ot

    1756-EN3TRK Series A versions 5.008 and prior and version 5.028: Update to 5.009 and 5.029 or later

  • Behoben1756-EN3TRK Series Bcisa_csaf_ot

    1756-EN3TRK Series B versions 11.002 and prior: Update to 11.003 or later

  • Mitigation1756-EN2F Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2F Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2F Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2FK Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2FK Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2FK Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2T Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2T Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2T Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2T Series Dcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TK Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TK Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TK Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TK Series Dcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TP Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TPK Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TPXT Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TR Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TR Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TR Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TRK Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TRK Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TRK Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TRXT Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TRXT Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TRXT Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TXT Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TXT Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TXT Series Ccisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN2TXT Series Dcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN3TR Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN3TR Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN3TRK Series Acisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1756-EN3TRK Series Bcisa_csaf_ot

    Customers using the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of vulnerability.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · PSIRT@rockwellautomation.comAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-787USprimärCWE-121USCWE-121US
05

betroffene Produkte (165)

Betroffene Produkte und Versionsbereiche.

20 von 165 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-23-264-04Rockwell Automation Select Logix Communication Modules2023-09-21icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.

07

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2023-09-20geändert 2026-06-17
10

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan