CVE-2023-3596 Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service

🗓️ 12 Jul 2023 12:51:19Reported by RockwellType

Rockwell Automation 1756-EN4* Ethernet/IP Communication Module DoS Vulnerabilit

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the microprogramming software for Rockwell Automation communication modules 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR, 1756-EN4TRK, and 1756-EN4TRXT controllers from the Allen-Bradley ControlLogix series allows a intruder to cause a service failure.	21 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-3596	12 Jul 202316:15	–	circl
CNNVD	Rockwell Automation 1756 缓冲区错误漏洞	12 Jul 202300:00	–	cnnvd
CVE	CVE-2023-3596	12 Jul 202312:51	–	cve
EUVD	EUVD-2023-44246	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation Select Communication Modules	12 Jul 202306:00	–	ics
NCSC	Vulnerabilities fixed in Rockwell Automation ControlLogix communication modules	14 Jul 202300:00	–	ncsc
NVD	CVE-2023-3596	12 Jul 202313:15	–	nvd
Prion	Design/Logic Flaw	12 Jul 202313:15	–	prion
Positive Technologies	PT-2023-3665 · Rockwell Automation · 1756-En2T +8	12 Jul 202300:00	–	ptsecurity

[
  {
    "defaultStatus": "unaffected",
    "product": "1756-EN4TR Series A",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "<=5.001"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "1756-EN4TRK Series A",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "<=5.001"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "1756-EN4TRXT Series A\t",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "<=5.001"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010

12 Jul 2023 13:16Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.02834

CWE-787

rockwell automation 1756-en4*ethernet/ip communication module dos vulnerability cip messages