Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks

🗓️ 13 Jul 2023 09:00:00Reported by The Hacker NewsType

Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks. Two security flaws impact ENIP communication module models, allowing remote code execution and denial-of-service. Patches available

Reporter	Title	Published	Views	Family All 26
BDU FSTEC	The vulnerability of the microprogramming software for Rockwell Automation communication modules 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR, 1756-EN4TRK, and 1756-EN4TRXT controllers from the Allen-Bradley ControlLogix series allows a hacker to execute arbitrary code.	21 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software for Rockwell Automation communication modules 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR, 1756-EN4TRK, and 1756-EN4TRXT controllers from the Allen-Bradley ControlLogix series allows a intruder to cause a service failure.	21 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-3595	12 Jul 202316:15	–	circl
Circl	CVE-2023-3596	12 Jul 202316:15	–	circl
CNNVD	Rockwell Automation 1756 EN2和1756 EN3 缓冲区错误漏洞	12 Jul 202300:00	–	cnnvd
CNNVD	Rockwell Automation 1756 缓冲区错误漏洞	12 Jul 202300:00	–	cnnvd
CNVD	Rockwell Automation 1756 EN2 and 1756 EN3 Denial of Service Vulnerabilities	16 Jul 202300:00	–	cnvd
CVE	CVE-2023-3595	12 Jul 202312:37	–	cve
CVE	CVE-2023-3596	12 Jul 202312:51	–	cve
Cvelist	CVE-2023-3595 Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution	12 Jul 202312:37	–	cvelist