PT-2023-3664 · Rockwell Automation · 1756-En2Tp+7

CVE-2023-3595 · Publicado 2023-07-12 · Atualizado 2024-05-22

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation 1756-EN2T version Rockwell Automation 1756-EN2TK version Rockwell Automation 1756-EN2TXT version Rockwell Automation 1756-EN2TP version Rockwell Automation 1756-EN2TPK version Rockwell Automation 1756-EN2TPXT version Rockwell Automation 1756-EN2TR version Rockwell Automation 1756-EN2TRK version Rockwell Automation 1756-EN2TRXT version Rockwell Automation 1756-EN2F version Rockwell Automation 1756-EN2FK version Rockwell Automation 1756-EN3TR version Rockwell Automation 1756-EN3TRK version Rockwell Automation 1756-EN4TR version Rockwell Automation 1756-EN4TRK version Rockwell Automation 1756-EN4TRXT version

Description The issue is related to a buffer overflow in the memory of Rockwell Automation communication modules. This could allow a remote attacker to execute arbitrary code using a specially crafted CIP package. The vulnerability may enable a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages, including the ability to modify, deny, and exfiltrate data passing through the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BDU:2023-03948

CVE-2023-3595

Produtos afetados

1756-En2F

1756-En2T

1756-En2Tp

1756-En2Tpxt

1756-En2Tr

1756-En3Tr

1756-En4Tr

1756-En4Trxt

Referências · 20

• https://twitter.com/exfil0/status/1696493245709091084 · Publicação no Twitter
• https://t.me/true_secator/4612 · Publicação no Telegram
• https://twitter.com/1Ivango1/status/1689610804340166656 · Publicação no Twitter
• https://twitter.com/cycsas/status/1696493450156257411 · Publicação no Twitter
• https://twitter.com/TGazdowski/status/1689710753358692355 · Publicação no Twitter
• https://twitter.com/opsmatters_uk/status/1722764288379515374 · Publicação no Twitter
• https://t.me/cvenotify/54144 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-03948 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-193-01 · Nota
• https://t.me/true_secator/5765 · Publicação no Telegram
• https://twitter.com/ZinoVersluys/status/1740002665655095756 · Publicação no Twitter
• https://t.me/cibsecurity/66547 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-3595 · Nota de Segurança
• https://twitter.com/CebercSecurity/status/1696493411770007770 · Publicação no Twitter
• https://twitter.com/comztech/status/1696447826840936887 · Publicação no Twitter