CVE-2023-3596

highPriorität · verfolgen · 31EPSS 0.037 · 90. PerzentilEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
3.71% (90th) EPSS
CVSS 7.5 · high
Is it mine?
180 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behoben1756-EN2F Series Acisa_csaf_ot

    1756-EN2F Series A: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2F Series Bcisa_csaf_ot

    1756-EN2F Series B: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2F Series Ccisa_csaf_ot

    1756-EN2F Series C: Update to 11.004 or later

  • Behoben1756-EN2FK Series Acisa_csaf_ot

    1756-EN2FK Series A: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2FK Series Bcisa_csaf_ot

    1756-EN2FK Series B: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2FK Series Ccisa_csaf_ot

    1756-EN2FK Series C: Update to 11.004 or later

  • Behoben1756-EN2T Series Acisa_csaf_ot

    1756-EN2T Series A: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2T Series Bcisa_csaf_ot

    1756-EN2T Series B: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2T Series Ccisa_csaf_ot

    1756-EN2T Series C: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2T Series Dcisa_csaf_ot

    1756-EN2T Series D: Update to 11.004 or later

  • Behoben1756-EN2TK Series Acisa_csaf_ot

    1756-EN2TK Series A: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TK Series Bcisa_csaf_ot

    1756-EN2TK Series B: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TK Series Ccisa_csaf_ot

    1756-EN2TK Series C: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TK Series Dcisa_csaf_ot

    1756-EN2TK Series D: Update to 11.004 or later

  • Behoben1756-EN2TP Series Acisa_csaf_ot

    1756-EN2TP Series A: Update to 11.004 or later

  • Behoben1756-EN2TPK Series Acisa_csaf_ot

    1756-EN2TPK Series A: Update to 11.004 or later

  • Behoben1756-EN2TPXT Series Acisa_csaf_ot

    1756-EN2TPXT Series A: Update to 11.004 or later

  • Behoben1756-EN2TR Series Acisa_csaf_ot

    1756-EN2TR Series A: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TR Series Bcisa_csaf_ot

    1756-EN2TR Series B: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TR Series Ccisa_csaf_ot

    1756-EN2TR Series C: Update to 11.004 or later

  • Behoben1756-EN2TRK Series Acisa_csaf_ot

    1756-EN2TRK Series A: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TRK Series Bcisa_csaf_ot

    1756-EN2TRK Series B: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TRK Series Ccisa_csaf_ot

    1756-EN2TRK Series C: Update to 11.004 or later

  • Behoben1756-EN2TRXT Series Acisa_csaf_ot

    1756-EN2TRXT Series A: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TRXT Series Bcisa_csaf_ot

    1756-EN2TRXT Series B: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TRXT Series Ccisa_csaf_ot

    1756-EN2TRXT Series C: Update to 11.004 or later

  • Behoben1756-EN2TXT Series Acisa_csaf_ot

    1756-EN2TXT Series A: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TXT Series Bcisa_csaf_ot

    1756-EN2TXT Series B: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TXT Series Ccisa_csaf_ot

    1756-EN2TXT Series C: Update to 5.029 or later signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN2TXT Series Dcisa_csaf_ot

    1756-EN2TXT Series D: Update to 11.004 or later

  • Behoben1756-EN3TR Series Acisa_csaf_ot

    1756-EN3TR Series A: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN3TR Series Bcisa_csaf_ot

    1756-EN3TR Series B: Update to 11.004 or later

  • Behoben1756-EN3TRK Series Acisa_csaf_ot

    1756-EN3TRK Series A: Update to 5.029 or later for signed versions (**recommended). Update to 5.009 for unsigned versions

  • Behoben1756-EN3TRK Series Bcisa_csaf_ot

    1756-EN3TRK Series B: Update to 11.004 or later

  • Behoben1756-EN4TR Series Acisa_csaf_ot

    1756-EN4TR Series A: Update to 5.002 or later

  • Behoben1756-EN4TRK Series Acisa_csaf_ot

    1756-EN4TRK Series A: Update to 5.002 or later

  • Behoben1756-EN4TRXT Series Acisa_csaf_ot

    1756-EN4TRXT Series A: Update to 5.002 or later

  • Mitigation1756-EN2F Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2F Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2F Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2FK Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2FK Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2FK Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2T Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2T Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2T Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2T Series Dcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TK Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TK Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TK Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TK Series Dcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TP Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TPK Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TPXT Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TR Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TR Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TR Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TRK Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TRK Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TRK Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TRXT Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TRXT Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TRXT Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TXT Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TXT Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TXT Series Ccisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN2TXT Series Dcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN3TR Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN3TR Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN3TRK Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN3TRK Series Bcisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN4TR Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN4TRK Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

  • Mitigation1756-EN4TRXT Series Acisa_csaf_ot

    ** Rockwell Automation strongly recommends updating to signed firmware if possible. Once the module is updated to signed firmware (example 5.008 to 5.0029), it is not possible to revert to unsigned firmware versions.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · PSIRT@rockwellautomation.comAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-787USprimärCWE-787USCWE-787US
05

betroffene Produkte (180)

Betroffene Produkte und Versionsbereiche.

20 von 180 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-23-193-01Rockwell Automation Select Communication Modules2023-07-12icsa · cisa_csaf_otUS

    Successful exploitation of these vulnerabilities could allow malicious actors to gain remote access of the running memory of the module and perform malicious activity.

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2023-07-12geändert 2026-06-17
10

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan