← Database

CVE-2023-2262

CRITICAL CVSS: 9.8 Published: 2023-09-20 Modified: 2026-06-17

Description

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

Affected Platforms

Rockwellautomation 1756-En2Tpxt Series ARockwellautomation 1756-En2Tk Series A FirmwareRockwellautomation 1756-En2Tr Series ARockwellautomation 1756-En2Txt Series ARockwellautomation 1756-En2Tpk Series A FirmwareRockwellautomation 1756-En2Tp Series ARockwellautomation 1756-En3Tr Series BRockwellautomation 1756-En2Trk Series A FirmwareRockwellautomation 1756-En2Trxt Series B FirmwareRockwellautomation 1756-En2Txt Series C

Weakness Type

CWE-121, CWE-787

References