Към съдържанието
Търсене

CVE-2023-2262: Rockwell Automation 1756-EN2T Series A, B, C, грешка в

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

Засегнати продукти

  • Rockwell Automation 1756-EN2T Series A, B, C: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2T Series D: <=11.002
  • Rockwell Automation 1756-EN2TK Series A, B, C: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2TXT Series A, B, C: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2TXT Series D: <=11.002
  • Rockwell Automation 1756-EN2TP Series A: <=11.002
  • Rockwell Automation 1756-EN2TPK Series A: <=11.002
  • Rockwell Auotmation 1756-EN2TPXT Series A: <=11.002
  • Rockwell Automation 1756-EN2TR Series A, B: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2TR Series C: <=11.002
  • Rockwell Automation 1756-EN2TRK Series A, B: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2TRK Series C: <=11.002
  • Rockwell Automation 1756-EN2TRXT Series A, B: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2TRXT Series C: <=11.002
  • Rockwell Automation 1756-EN2F Series A, B: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2F Series C: <=11.002
  • Rockwell Automation 1756-EN2FK Series A, B: <=5.008 & 5.028
  • Rockwell Automation 1756-EN2FK Series C: <=11.002
  • Rockwell Automation 1756-EN3TR Series A: <=5.008 & 5.028
  • Rockwell Automation 1756-EN3TR Series B: <=11.003
  • Rockwell Automation 1756-EN3TRK Series A: <=5.008 & 5.028
  • Rockwell Automation 1756-EN3TRK Series B: <=11.002
  • rockwellautomation 1756-en2fk_series_c_firmware: 5.008 до 5.028; до 11.0002

Вид слабост

История

  • 20 септември 2023 Публикувано

Други уязвимости в Rockwell Automation 1756-EN2T Series A, B, C

Първоизточници

CVE-2023-2262: Rockwell Automation 1756-EN2T Series A, B, C, грешка в | freedomonline.bg